TriZetto Breach Exposes 3,433,965 Health Records

TriZetto Provider Solutions, a healthcare technology company owned by Cognizant, disclosed that unauthorized actors accessed sensitive personal and health information belonging to 3,433,965 individuals through a web portal used by its healthcare provider customers. The breach, which began in November 2024 and continued undetected until October 2025, involved the theft of data related to insurance eligibility verification transactions.

The company detected suspicious activity in the portal on October 2, 2025, prompting an investigation with the assistance of external cybersecurity experts and law enforcement. That probe revealed that the unauthorized access started on November 19, 2024, and persisted for nearly a year, allowing the threat actors to siphon records until the activity was halted. TriZetto notified affected healthcare providers in December 2025 and began informing individuals directly in early 2026, as required by state regulations. A filing with the Maine Attorney General's Office, submitted in late 2025, detailed the scope of the incident and confirmed the exact number of impacted people.

The compromised data varied by individual but included names, addresses,...