ZenPatient Data Breach Investigation

ZenPatient, Inc., a Santa Monica, California-based digital health and telehealth software company, has reportedly suffered a significant data breach that may have compromised sensitive patient information. The Attorneys General of Texas and California have reported on the incident.

Given the nature of its health-related work, ZenPatient manages large volumes of protected health information (PHI) and personally identifiable information (PII) on behalf of its clients and their patients. Contact our data breach attorneys to learn more about your legal options following incidents like these.

Breach Timeline

According to public reports, unauthorized access to ZenPatient systems occurred between early December 2025 and mid-February 2026. The incident was reportedly detected in late February 2026, with formal notifications and public disclosure following several months later.

As is common in healthcare technology breaches, the full scope, including the exact categories of data accessed and the precise number of individuals affected, may not be fully known until ZenPatient issues additional notifications or regulatory filings become available.

If you received a notification letter from ZenPatient or one of its partner providers about this incident, take it seriously. You may have important legal rights and options for recourse.

How The Lyon Firm Can Help

The Lyon Firm has years of experience representing individuals and classes affected by healthcare data breaches across the country. Our attorneys are well-versed in HIPAA and the obligations companies have to safeguard sensitive health information, and we hold organizations accountable when they fail to implement reasonable security measures to protect the data entrusted to them.

If your personal or protected health information may have been compromised in the ZenPatient data breach, contact The Lyon Firm today for a free consultation. Our attorneys will help you understand your rights, and determine whether you may be entitled to compensation.

‍

‍

References to ZenPatient, Inc. are based on publicly available reports at the time of writing and may be updated as additional information becomes available. Nothing in this article should be construed as a final determination of wrongdoing by any company named.