Skip to content
cisonews.net

Incident · State breach notice (California AG)

Photon Health Notifies California AG of Metabase Zero-Day Data Breach

Published . By the cisonews.net Desk.

What the notice says

Photon Health filed a notice of data breach with the California Attorney General, reported 2026-10-28, describing a security incident involving its software platform. Photon Health described itself as . According to the notice, Photon Health learned that . Photon Health stated that data may have been acquired , and that it completed its review of the affected data on September 4, 2026. The notice specifies that , but that . Photon Health said it has .

What the notice leaves open

The notice as filed does not state a total number of individuals affected across all jurisdictions, though it notes that may be impacted by the event. The notice as filed does not identify how many healthcare providers use the affected Photon Health platform or name any specific provider organizations connected to the exposed text messages and phone numbers.

Sources

  1. 2026-10-28 · APhoton Health, notice filed with the California Attorney General, published October 28, 2026
  2. 2026-10-28 · ACalifornia Attorney General, data breach notification record, published October 28, 2026

Tier A: the organization itself (including notices it filed with a state attorney general), a regulator or SEC EDGAR. Tier B: established press. Each fact on this page carries its supporting passage in the page source.

See an error? Corrections are made on the page and logged on the corrections page. Send them through contact.