zHealth, Inc.
bd_09565557447b8e65 · schema v1 · pii pii-v2
zHealth, Inc. notified the California Attorney General of a data breach where an unauthorized third party copied information from its network between January 20-21, 2026. The company became aware of the incident on June 15, 2026. Affected data may include names, addresses, Social Security numbers, and financial account information. zHealth retained forensic specialists and is providing 12 months of credit monitoring and fraud assistance to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Jan 20, 2026
Begins
Jun 15, 2026
Discovered
Sep 11, 2026
Filed
vs. sector median
+3 wks slower
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Sitekazubd_63ca79c9153b788c2026-01-26 · +228dCandidate
Regulatory filings (4) · sorted by filing gap
- Oregon State AGbd_1b9d27f3c07035af2026-09-11Verified
- Washington State AGbd_739608865619b3f12026-09-11Verified
- Texas State AGbd_136b40de0e1091732026-09-15 · +4dVerified
- HHS OCRbd_f73668fb4abe49ff2026-07-29 · +44dVerified by operator
Filing propagation · 5 filings · 4 states
View merged incident ↗Pattern: first filing Jul 29 (CA), last Sep 15 (TX) — a 48-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.