2026 Enara Health — provider app copy; census unpublished
Data compromised
HIPAA Journal: names, email addresses, phone numbers, dates of birth, provider names and limited self-reported medical information, mix by person. Sample letter uses a mail-merge token for fields. Helpline 844-971-8639, 8am-5:30pm CT weekdays. No misuse found. recordsAffected 0.
Technical writeup
CA AG sample 6 Nov is primary. Do not invent a people count from aggregator pages.
Root cause
California AG sample letter dated 6 November 2026: Enara Health detected suspicious activity on the provider application 10 September 2026. Passwords changed, impacted accounts disabled, federal law enforcement notified. Unauthorised access for a limited time that day. Network and other systems not reached. Data on the application was obtained. Census unpublished.