ZenPatient, Inc. filed a data breach notification with the California Attorney General on July 17, 2026, referencing incident dates of December 5, 2025 and February 12, 2026. The official notification document submitted for this filing appears to be a scanned image, and no readable text could be pulled from it. That means we can’t tell you exactly how the breach happened, whether it involved a third-party vendor, or what specific information was involved, because the filing itself doesn’t say so in a machine-readable way. The cause is being listed as unknown until more detailed information becomes available or is published elsewhere.
Because the source filing doesn’t include a stated count or a detailed description of who was affected, we can’t tell you the exact number of people involved or whether you specifically are impacted. If you received a letter directly from ZenPatient, that letter is the most reliable source of details about your situation, since it should include information that isn’t visible in the public regulator filing. Other healthcare breaches, like the AgelessRx data breach notification, show how these filings can vary widely in the level of detail companies provide, so it’s worth reading your own letter closely.
What information was exposed?
- The specific categories of personal or health information involved were not disclosed in the readable version of this filing.
- Healthcare breach notifications like this one often involve some combination of names, contact details, dates of birth, health insurance or patient account information, treatment or diagnosis information, or Social Security numbers, but none of these are confirmed for this incident.
- If you received a direct letter from ZenPatient, check it for a specific list of data types, since that letter may contain details not available in the public filing.
The filing does not mention any offer of free credit monitoring, identity protection services, or similar remedies from ZenPatient. If your letter includes such an offer with an enrollment code or deadline, follow the instructions in your letter directly, since that information isn’t available here.
What should you do now?
- Keep the notification letter you received, and note any account numbers, dates, or contact information it includes, in case you need to reference them later.
- Watch your health insurance statements, explanation-of-benefits notices, and medical bills for services you don’t recognize, which can be a sign of medical identity theft.
- Place a fraud alert or security freeze on your credit files with the three major credit bureaus as a precaution, especially given how little is currently known about what data was involved.
- Consider signing up for a service like Aura or LifeLock, which can alert you if your personal information appears elsewhere, such as on data broker sites or in known breach databases.
- Be cautious of unexpected calls, texts, or emails claiming to be from ZenPatient or your healthcare provider that ask for personal details or payment; verify any such contact independently before responding.
- Regularly check your credit reports for new accounts or inquiries you don’t recognize, and consider reviewing similar cases like the Devereux Foundation data breach to understand common follow-up steps after healthcare data incidents.