kazu ransomware group lists zHealthEHR — Practice Management Software for Chiropractic & Wellness Clinics on its leak site
zHealthEHR has been listed on the leak site of the threat actor group known as kazu, with claims of 15 GB of data being compromised.
- Published
- 2 min read
- 2 min read
- Ransomware group: kazu
- Country: United States
- Sector: Technology
- Announcement date: January 26, 2026
The kazu group claims a breach of zHealthEHR
The technology company zHealthEHR has been listed on a leak site associated with the threat actor group known as kazu. According to the announcement made on January 26, 2026, the group claims to have successfully targeted the organization in a cyberattack occurring on the same date.
Ransomware groups often utilize leak sites to pressure victims into paying ransoms. This tactic is a core component of double extortion, where attackers not only encrypt a victim's systems to disrupt operations but also steal sensitive data to threaten its public release. By hosting a dedicated site for stolen data, these groups create a public sense of urgency and reputational risk for the targeted organization.
In this specific instance, the kazu group has issued a ransom demand of $500,000. This payment is requested by the threat actors in exchange for a commitment not to publish the allegedly compromised information on their platform.
Claims regarding the stolen data
The threat actor group has made specific claims regarding the volume of information they have allegedly obtained during the incident. The group asserts that the total size of the compromised data is approximately 15 GB.
Despite the claims regarding the total volume of the data, the listing does not provide specific details regarding the content of the files. No screenshots or detailed lists regarding the content of the allegedly compromised data have been provided by the group.
Data details
- Total claimed data size: 15 GB
The listing names no specific data types or individual file categories that were allegedly taken during the attack.
About zHealthEHR
zHealthEHR is a technology company that provides cloud-based electronic health record (EHR) and practice management software for chiropractic and wellness clinics. The platform aims to digitize clinical operations by integrating appointment scheduling, billing, clinical documentation, and patient management into a single system.
Potential implications and industry risks
This incident may pose significant data privacy risks for healthcare providers and patients using the zHealthEHR platform. Given the sensitivity of health records, a potential breach could trigger legal processes under HIPAA regulations. The nature of the data handled by such platforms means that any compromise could potentially be utilized for identity theft or targeted phishing attacks.
Furthermore, any disruption to the platform's services may create secondary risks for the supply chain. Because zHealthEHR serves as a centralized system for clinical operations, an attack on the provider can have cascading effects on the various clinics and medical professionals who rely on the software for daily management.
In the broader cybersecurity landscape, organizations in the healthcare technology sector are frequent targets due to the high value of medical records. To defend against such threats, organizations typically implement multi-factor authentication, maintain rigorous backup protocols, and conduct regular security audits. While public information regarding the kazu group remains limited, this incident highlights the ongoing risks faced by cloud-based management systems in the wellness and chiropractic sectors.