Enara Health Data Breach Exposes Patient and Provider Information

Enara Health Inc., a health care company that provides personalized weight-management and obesity-care programs, disclosed a data breach that affected its provider application platform.

The breach was disclosed to the California Attorney General on Nov. 6, 2026, and to the Texas Attorney General on Nov. 10, 2026, with 794 Texas residents identified as affected. The company posted a notice of the incident on its website, and consumer notification letters were sent on Nov. 6, 2026.

On Sept. 10, 2026, Enara Health detected suspicious activity associated with its provider application. Upon detecting this suspicious activity, the company began an investigation and took steps to contain the situation and limit any further unauthorized access.

The investigation determined that an unauthorized party gained access to the provider application platform for a period of time on Sept. 10, 2026. During the window, the unauthorized party obtained data containing consumer information from the platform. The unauthorized access was confined to the provider application platform and did not extend to the company's broader network or other systems.

The types of personally identifiable information potentially exposed in the breach included names, email addresses, phone numbers, dates of birth and provider names.

In some instances, protected health information that individuals self-reported through the company's app was also exposed, such as details an individual provided about a medical condition, treatment information, appointment dates or medications.

Enara Health's response to the breach

Enara Health set up a dedicated toll-free assistance line for individuals who have questions about the incident. Affected individuals can reach the line by calling 844-971-8639, Monday through Friday from 8:00 a.m. to 5:30 p.m. Central Time, excluding U.S. holidays.