HackerFeeds
All ransomware incidents
zhealthehr.com

Ransomware group kazu hits zHealthEHR — Practice Management Software for Chiropractic & Wellness Clinics

MEDIUM
·Technology·US·2026-01-26

zHealthEHR — Practice Management Software for Chiropractic & Wellness Clinics — a technology target operating in US has been listed by the kazu ransomware group on 2026-01-26. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.

Incident Report

Target OrganizationzHealthEHR — Practice Management Software for Chiropractic & Wellness Clinics
Threat Group
kazu
SummaryzHealthEHR is a cloud-based electronic health record (EHR) and practice management platform built primarily for chiropractors and other wellness providers. It combines clinical documentation, appointment scheduling, patient intake, billing, payments, and automated reminders into a single system, helping small to mid-size practices streamline daily operations. The platform focuses on ease of use, customizable SOAP notes, and patient engagement tools, allowing providers to reduce administrative workload and run their clinics more efficiently through a subscription-based software model.
Date of Breach2026-01-26
Discovery Date2026-01-26
RegionUS
Target Domainwww.zhealthehr.com
Business SectorTechnology
Severity
MEDIUM
Ransom Demand$500 000
Data Size15 GB

Claim by kazu

zHealthEHR is a cloud-based electronic health record (EHR) and practice management platform built primarily for chiropractors and other wellness providers. It combines clinical documentation, appointment scheduling, patient intake, billing, payments, and automated reminders into a single system, helping small to mid-size practices streamline daily operations. The platform focuses on ease of use, customizable SOAP notes, and patient engagement tools, allowing providers to reduce administrative workload and run their clinics more efficiently through a subscription-based software model.

Posted by the kazu threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.

Disclaimer

HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.