HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICLowContained
ZenPatient
bd_1311828b53d1ac47 · schema v1 · pii pii-v1
Full breach record for ZenPatient →ZenPatient, Inc. notified the California Attorney General of a data breach where an unauthorized actor accessed or copied data between December 5, 2025, and February 12, 2026. Suspicious activity was identified on February 27, 2026. Affected data includes names and other identity information. The company engaged third-party specialists, notified law enforcement, and is offering 12 months of credit monitoring to affected individuals.
California clockDiscovered Feb 27, 2026 → Notified Jul 17, 2026140d ✗ CA 30-day late20 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-626689
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 17, 2026
- Raw hash
- 1ab407c1a19d0e31aad0dd61f58c655261506f1c184e4de2310018ea160d4d68
Reporting entity
- Name
- ZenPatientnorm: zenpatient
- Domain
- zenpatient.com
Victim entity
- Name
- ZenPatientnorm: zenpatient
- Domain
- zenpatient.com
Incident
- Discovered
- Feb 27, 2026
- Materiality determined
- —
- Notification sent
- Jul 17, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementNotifying appropriate state and federal government regulators
Compliance
- Time to disclose
- 20 weeks(140 days from discovery to filing)
- Compliance flags
- CA 30-day late · 140dCA AG copy ≤15d · 0d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 27, 2026→ Notified: Jul 17, 2026140d 30 calendar days CA 30-day late California Consumers notified: Jul 17, 2026→ AG copy submitted: Jul 17, 20260d 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.