ZenPatient Data Breach Exposes Medical Information: 15k Impacted

ZenPatient Inc., a digital health and telehealth software company based in Santa Monica, California, disclosed a data breach involving unauthorized access to its network between December 2025 and February 2026. A total of 15,749 individuals were impacted, including 1,179 residents of Texas.

On or around Feb. 27, 2026, ZenPatient identified suspicious activity on its network. After detecting suspicious network activity, ZenPatient launched an investigation with the assistance of third-party cybersecurity and data privacy specialists.

The investigation determined that an unauthorized actor accessed or copied certain ZenPatient data during a period that spanned from Dec. 5, 2025, through Feb. 12, 2026.

Once the investigation established the scope of the unauthorized access, ZenPatient conducted a comprehensive review of the affected data. The review was completed on or about July 1, 2026.

The types of information exposed as a result of the breach included names, addresses, dates of birth and medical information.

The breach was additionally reported to the California Attorney General. ZenPatient began sending notification letters to affected consumers on July 17, 2026.

ZenPatient's response to the breach

ZenPatient is offering affected individuals 12 months of complimentary credit monitoring and identity theft protection services through Experian IdentityWorks. To enroll, affected individuals should use the unique activation code included in their notification letter. Enrollment must be completed by Oct. 31, 2026.

Anyone with questions about the incident can call 833-931-4343 from 8 a.m. to 8 p.m. Central time, Monday through Friday, excluding major U.S. holidays. Affected individuals may also write to ZenPatient at 11520 Marco Place, Los Angeles, CA 90066.