DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedDelayed DiscoveryIdentity (basic)LowContained

ZenPatient

bd_1311828b53d1ac47 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 27, 2026

Filed

Jul 17, 2026

To disclose

20 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

65%
Full breach record for ZenPatient

ZenPatient, Inc. notified the California Attorney General of a data breach where an unauthorized actor accessed or copied data between December 5, 2025, and February 12, 2026. Suspicious activity was identified on February 27, 2026. Affected data includes names and other identity information. The company engaged third-party specialists, notified law enforcement, and is offering 12 months of credit monitoring to affected individuals.

California clockDiscovered Feb 27, 2026Notified Jul 17, 2026140d CA 30-day late20 weeks discovery → filing

Incident timeline

undetected · 84 days
discovery → filing · 20 weeks / 140 days

Dec 5, 2025

Begins

Feb 27, 2026

Discovered

Jul 17, 2026

Filed

vs. sector median

+9 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 3 states

View merged incident ↗
Washington State AGJul 17 · first
HHS OCRJul 17 · first
California State AGJul 17 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.