zizzl
Disclosed Aug 14, 20251 year ago2,514 affectedConfirmed
The business associate (BA), zizzl llc, reported that an employee was the subject of an email phishing scheme that affected the protected health information (PHI) of 2,416 individuals. The PHI involved included names, addresses, zip codes, dates of birth, drivers’ license information, and Social Security Numbers, and other identifiers, claims information, and other financial information, medications, and other treatment information. The BA notified HHS, the affected covered entities, and the affected individuals. In response to the breach the BA implemented additional technical safeguards to better protect PHI.
What is known
| People affected | 2,514 (as reported by the organization) |
|---|---|
| Disclosed | Aug 14, 2025 |
| Happened | May 29, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2025 data breach report: zizzlin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): zizzl (Business Associate, WI)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Aug 14, 2025 | 167 |
| HHS archivetotal | Aug 22, 2025 | 2,416 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), zizzl llc, reported that an employee was the subject of an email phishing scheme that affected the protected health information (PHI) of 2,416 individuals. The PHI involved included names, addresses, zip codes, · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.