12 months of monitoring
Eligible notice recipients may activate the complimentary Cyberscout services within 90 days of their letter. This is a protection service, not a settlement payment.
zHealth Data Breach Investigation: Do You Qualify?
Updated September 16, 2026
- Defendant
- zHealth, Inc.
- Status
- Under investigation
- Potential compensation
- If the case succeeds or settles
- How to join
- Accepting claimants now
- Proof required
- No claim form proof for basic payout
Overview
- Company
- California healthcare software provider connected to medical-practice data
- Incident
- Unauthorized activity occurred January 20–21, 2026
- Notice
- Data review finished September 3; notices dated September 11, 2026
- Available now
- Use your notice, activate offered monitoring, preserve records, and request attorney review
zHealth, Inc. is a California healthcare software company. Healthcare practices may use its technology in their day-to-day operations, which can place patient and insurance information in systems or files connected to the company. zHealth says an unauthorized third party may have copied information from its network environment during a two-day period in January 2026.
The company says it became aware of the event on or about June 15, 2026 and hired legal counsel and forensic specialists to investigate. Its investigation identified unauthorized activity on January 20 and January 21. zHealth then reviewed the affected data and says it completed that work on September 3.
California's official breach-notification portal identifies zHealth as the reporting organization and lists the same January dates. Public reporting based on the company's notice says the affected information varies by person and may include names, medical information, and health-insurance information. The redacted California sample letter does not display the recipient-specific data field, so each person's own notice is the controlling source for what zHealth associated with that individual.
Attorneys are seeking information from people who received notice or otherwise believe they were affected while they evaluate whether a class action should be filed. No filed complaint, certified class, settlement fund, court-approved payment, or legal claim deadline appears in the reviewed record. Contacting an attorney is not a settlement claim and does not guarantee representation or compensation.
Who qualifies
- You received a notice from zHealth dated September 11, 2026 stating that your information may have been involved.
- Your medical provider or another organization used zHealth services, and you have a specific reason to believe zHealth held information connected to you in the affected files.
- Your own notice identifies the data associated with you. Public summaries say possible categories include name, medical information, and health-insurance information, but the categories vary by person.
- Attorneys are investigating a possible case. No court has certified a class or issued final legal eligibility rules.
What you could receive
No payment established
Attorneys are investigating. No complaint, certified class, settlement fund, or guaranteed compensation has been identified.
No settlement payment is available in the reviewed record. A future lawsuit could seek money or other relief, but no recovery has been established or guaranteed.
zHealth's sample notice offers eligible recipients twelve months of single-bureau credit monitoring, a credit report and credit score service, alerts about changes to the credit file, and fraud-assistance services through Cyberscout. Recipients must activate the service themselves within 90 days of the date on their letter. The service requires internet access and an email account and may not be available to minors under 18.
How to file your claim
- 1Read your zHealth notice carefully and use it as the controlling source for the information associated with you.
- 2Keep the complete notice, envelope, activation instructions, emails, and any communications from your healthcare provider or zHealth.
- 3If you want the complimentary Cyberscout services, activate them within 90 days of the date on your letter using the recipient-specific code. Do not publish or share that code.
- 4Review relevant credit, insurance, medical, and financial records. Preserve evidence of suspicious activity, expenses, reports, and time spent responding.
- 5Submit the eligibility form below if you want an attorney or legal representative to review your situation. This is not an official settlement claim and does not guarantee representation or payment.
This case is still developing and has no official claim site yet. Class Action Pulse is not a law firm — submit your details below to be notified and connected with a firm handling the case.
Free Eligibility Check
Do you qualify?
Check your eligibility and get help understanding your claim. It's free and takes under a minute.
Sources
Frequently asked questions
Has a zHealth class action lawsuit been filed?
The reviewed sources describe an attorney investigation, not a filed class action. No complaint, certified class, settlement, or court-approved claims process was identified as of September 16, 2026.
What information may have been involved?
Public reporting based on zHealth's notice says the affected information may include names, medical information, and health-insurance information. The categories vary by person, so your own notice controls.
Does zHealth say the information was misused?
zHealth's sample notice says the company was not aware of actual or attempted misuse to perpetrate fraud when it issued the letter. That statement does not prove misuse occurred, and it does not guarantee that misuse cannot occur later.
What does joining the investigation mean?
It means asking an attorney to review your facts and possibly provide information relevant to whether a lawsuit should be filed. It is not a court claim, does not itself create an attorney-client relationship, and does not guarantee recovery.
Is protection available now?
The sample notice offers eligible recipients twelve months of Cyberscout credit monitoring and fraud assistance. Activation is required within 90 days of the date on the recipient's letter.