Breaches and incidents
zHealth (San Francisco EHR and practice management vendor): 118,563 affected, Kazu claimed
Per HIPAA Journal, zHealth’s network was accessed on 20 and 21 Jan 2026.
- Disclosed
- Verification
- Reported by a reputable outlet, citing the company
What happened
- Per HIPAA Journal, zHealth’s network was accessed on 20 and 21 Jan 2026; it learned on or around 15 Jun 2026 that data may have been copied, and the Oregon AG was told 118,563 people were affected (names, medical and insurance information). Update: zHealth filed with the California AG on 11 Sep 2026; the count is new in window. HIPAA Journal’s headline spells it “xHealth”.
- Root cause: not disclosed.
- HIPAA Journal says the Kazu ransomware group claimed responsibility.
- Policies reviewed and enhanced; 12 months of credit monitoring offered.