Hazel Health Data Breach Investigation

A ransomware group called DireWolf claims it stole data from Hazel Health, a California-based school telehealth provider. The breach monitoring service Breachsense recorded the claim on September 15, 2026. Hazel Health has not publicly confirmed a breach, and the allegations remain unverified.

What Is Alleged at Hazel Health?

Breachsense lists the claimed leak at 341 gigabytes. Hazel Health connects K-12 students with virtual physical and mental health care. The public listing does not say what types of information the files contain or how the group obtained them. Tracker RansomLook describes DireWolf as a double-extortion group that first appeared in May 2025, meaning it threatens to publish stolen files to pressure victims.

A leak-site listing is a claim by the group behind it. It does not verify what happened, what data was taken, or who was affected. Until Hazel Health, a school district, or a regulator provides details, families should treat the reports as unconfirmed.

What Families Can Do Now

• Watch for notices from Hazel Health or your child's school district
• Be skeptical of unexpected calls, texts, or emails that mention your child's health or school
• Review insurance statements for services you do not recognize
• Ask the credit bureaus about freezing a minor's credit file

Legal Considerations

California law gives residents rights when organizations fail to protect personal or medical information. Whether a claim exists depends on what data was taken and what security measures the company maintained. Those facts take technical and legal work to establish.

Contact The Lyon Firm

The Lyon Firm represents plaintiffs in healthcare data privacy cases nationwide. If you or your child used Hazel Health services, our attorneys can explain your options. Call (513) 381-2333, or contact The Lyon Firm online for a free, confidential consultation.