2026 ZenPatient — network intrusion Dec 2025–Feb 2026; CA AG notice Jul 17
Data compromised
Names plus additional personal-information elements (sample CA notice uses individualized placeholders); count not published
Technical writeup
ZenPatient, Inc. (Los Angeles health-tech; Healthspan-related) filed a California Attorney General sample notice (sb24-626689, listed Jul 17, 2026) stating that after detecting suspicious activity on or around February 27, 2026, investigation found an unauthorized actor accessed or copied certain company data between December 5, 2025, and February 12, 2026. A data review completed about July 1, 2026 preceded individual notifications. The sample letter offers 12 months of Experian credit monitoring, states federal law enforcement was notified, and reports no known misuse at notice time. Specific secondary data elements and total affected count are not published in the public sample (placeholders). Class-action firms opened investigations after the CA filing.
Root cause
Unauthorized actor accessed or copied certain ZenPatient network data (root cause / intrusion vector not disclosed in sample CA notice)