ZenPatient, Inc. Data Breach Notice (Washington Attorney General)

The filing from ZenPatient, Inc. means that 651 Washington residents now face a permanent mix of identity and health risks that cannot be undone. Your name, full date of birth, passport number, and medical information were listed in the incident that occurred on December 05, 2025. The organisation filed the notice with the Washington Attorney General on July 17, 2026 — 224 days later.

Why the 224-day gap stands out

Seven and a half months passed between the breach date and the official filing. State notification rules allow time for investigation, but an interval this long is unusual and gives anyone whose records were taken a long period during which they had no way of knowing their information was exposed. The record does not explain what happened inside that window.

What each exposed category actually enables

Name combined with full date of birth creates a reliable anchor for identity thieves. A date of birth never expires and cannot be reissued. When paired with a passport number, it becomes strong evidence of identity for opening accounts, applying for credit, or requesting government services in your name.

Passport numbers are particularly valuable because they are government-issued travel documents. Replacing one is expensive, requires in-person appointments, and can take weeks. Until a new passport is issued, the old number remains usable for fraud.