A2Z Diagnostics

Disclosed Jul 28, 202135,587 affectedConfirmed

The covered entity (CE), A2Z Diagnostics, reported that several employees were the victims of an email phishing scheme that compromised the protected health information (PHI) of 35,587 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, financial information, and diagnoses. The CE notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE provided complimentary credit monitoring services and implemented additional administrative and technical safeguards to better protect its PHI.

What is known

People affected	35,587 (as reported to HHS)
Disclosed	Jul 28, 2021
Happened	Feb 2, 2021
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: A2Z Diagnostics

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): A2Z Diagnostics (Healthcare Provider, NJ)

Notices filed

Residents of CAJul 28, 2021

California AGCount not stated

TotalJul 28, 2021

HHS archive35,587 people

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 35587by backfillSource

summary2026-09-25

empty to The covered entity (CE), A2Z Diagnostics, reported that several employees were the victims of an email phishing scheme that compromised the protected health information (PHI) of 35,587 individuals. The PHI involved included names, addressesby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about A2Z Diagnostics