zHealth notifies individuals after unauthorized copying of network data

What the notice says

zHealth, Inc. notified the Washington State Attorney General on September 11, 2026, informing individuals that personal information may have been affected after an unauthorized third party accessed its network environment. The company states it became aware of the activity on June 15, 2026, and later determined that the unauthorized activity occurred between January 20 and January 21, 2026 . zHealth says it retained legal counsel and third-party forensic specialists to investigate the scope of the incident . The organization completed its review of the potentially impacted information on September 3, 2026 . The notice states that the information impacted varies by individual, though the specific categories of data are not listed in the version of the letter reviewed. For Rhode Island, zHealth reports that the event involves 17 individuals in that state .

What zHealth is doing

zHealth is offering affected individuals access to credit monitoring, credit report, and credit score services through Cyberscout, a TransUnion company, at no charge for twelve months . The company also says it is providing proactive fraud assistance through the same vendor .

What the notice leaves open

The notice does not specify a total number of individuals affected nationwide, nor does it identify the specific categories of personal information involved beyond stating that they vary by individual. It also does not describe how the unauthorized third party gained access to zHealth's network.