zHealth, Inc. Data Breach: Edelson Lechtzin LLP Launches Investigation Into Exposure of Medical and Health Insurance Information

National class action firm Edelson Lechtzin LLP is offering free case evaluations to individuals affected by the zHealth, Inc. data breach, which may have exposed names, medical information, and health insurance information for approximately 118,563 people.

SAN FRANCISCO, Sept. 16, 2026 /PRNewswire/ -- Edelson Lechtzin LLP, a national class action law firm, is investigating data privacy claims arising from the zHealth, Inc. data breach. zHealth began notifying affected individuals on September 11, 2026, and reported the incident to state regulators, including the Texas Attorney General's Office on September 15, 2026.

Key Facts at a Glance

• Company: zHealth, Inc. — a San Francisco-based healthcare technology company providing cloud-based practice management and electronic health record (EHR) software.
• When access occurred: Between January 20 and January 21, 2026.
• When discovered: On or about June 15, 2026.
• Data review completed: September 3, 2026.
• Information exposed: Names, medical information, and health insurance information (varies by individual).
• People affected: Approximately 118,563.
• Individuals notified: Beginning September 11, 2026.
• Regulators notified: California and Texas Attorney General offices; the Oregon Attorney General was informed the breach affected 118,563 individuals.

What Happened
zHealth determined that an unauthorized third party accessed its network between January 20 and January 21, 2026. The company became aware on or about June 15, 2026, that certain information may have been copied, launched a forensic investigation, and completed its review of the affected data on September 3, 2026. zHealth then began notifying affected individuals on September 11, 2026.

What Information Was Exposed
The exposed data varies by individual and may include names, medical information, and health insurance information. Because medical and insurance records carry long-term risks of identity theft, insurance fraud, and misuse of protected health information, affected individuals should remain vigilant.

zHealth's Response
zHealth has offered affected individuals single-bureau credit monitoring, credit report, and credit score services for 12 months and says it has reviewed and enhanced its data privacy and security policies.

Your Legal Options
Edelson Lechtzin LLP is investigating a potential class action to pursue legal remedies on behalf of individuals whose sensitive personal data may have been compromised in the zHealth breach. The firm will evaluate your rights and potential claims at no cost.

Recommended Protective Steps

• Preserve any breach notification letter and enroll in the credit monitoring offered by zHealth.
• Review account statements, credit reports, and Explanation of Benefits notices for unfamiliar activity.
• Consider placing a fraud alert or credit freeze, and stay alert for phishing attempts referencing the breach.

Contact Us for a Free Case Evaluation
Speak confidentially with a data privacy attorney today: Marc Edelson, Esq., Edelson Lechtzin LLP, 411 S. State Street, Suite N-300, Newtown, PA 18940; Phone: 844-696-7492; Email: [email protected]; Web: www.edelson-law.com. Or click HERE to request a free consultation.

About Edelson Lechtzin LLP
Edelson Lechtzin LLP is a national class action law firm with offices in Pennsylvania and California. In addition to data breach litigation, the firm handles class and collective actions involving securities and investment fraud, federal antitrust violations, ERISA employee benefit plans, wage theft, and consumer fraud.

Legal Notice: This press release may be considered Attorney Advertising in some jurisdictions.

SOURCE Edelson Lechtzin LLP