ZenPatient Discloses Data Breach Spanning from December to February

ZenPatient Inc., a digital health and telehealth software company based in Santa Monica, California, disclosed a data breach involving unauthorized access to its network between December 2025 and February 2026.

The breach was reported to the California Attorney General on July 17, 2026. ZenPatient identified suspicious activity on its network on or around Feb. 27, 2026, and began sending notification letters to affected consumers on July 17, 2026.

After detecting suspicious network activity, ZenPatient launched an investigation with the assistance of third-party cybersecurity and data privacy specialists, according to the company's notification letter to consumers.

The investigation determined that an unauthorized actor accessed or copied certain ZenPatient data during a period that spanned more than two months, from Dec. 5, 2025, through Feb. 12, 2026.

Once the investigation established the scope of the unauthorized access, ZenPatient conducted a comprehensive review of the affected data. This review was completed on or about July 1, 2026.

ZenPatient's response to the breach

ZenPatient is offering affected individuals 12 months of complimentary credit monitoring and identity theft protection services through Experian IdentityWorks. No credit card is required to enroll. The membership includes several features meant to help consumers detect and respond to potential misuse of their personal information.

The Experian IdentityWorks membership provides an Experian credit report at the time of signup, with daily credit reports available for those who enroll online. It also includes ongoing monitoring of the individual's Experian credit file for indicators of fraud, access to identity restoration specialists and up to $1 million in identity theft insurance.

If an affected individual believes there has been fraudulent use of their information as a result of this incident, they can contact an Experian agent for assistance. If identity restoration support is determined to be needed, an Experian Identity Restoration agent will work with the individual to investigate and resolve each instance of fraud, according to the notification.

To enroll, affected individuals should use the unique activation code included in their notification letter. Enrollment must be completed by Oct. 31, 2026. The service is available online through Experian's IdentityWorks website.

Anyone with questions about the incident can call 833-931-4343 from 8 a.m. to 8 p.m. Central time, Monday through Friday, excluding major U.S. holidays. Affected individuals may also write to ZenPatient at 11520 Marco Place, Los Angeles, CA 90066.