TriZetto Provider Solutions trizetto.com

TriZetto data breach: what happened and what to do

TriZetto Provider Solutions, a Cognizant company that checks insurance eligibility for healthcare providers, found suspicious activity on October 2, 2025. About 3.4 million people were affected. Names, addresses, dates of birth, Social Security numbers and health insurance details may have been exposed.

View all 13,177 breaches
Breach date
19 Nov 2024
Made public
9 Dec 2025
Affected
3,433,965
Data exposed
Names, Physical addresses, Dates of birth, Social security numbers, Health insurance information
Last updated

Reviewed by Anthon Wansland

Head of Product & Co-Founder

Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.

What happened

TriZetto Provider Solutions (TPS) is a Cognizant subsidiary that runs insurance eligibility checks for hospitals and clinics. On October 2, 2025, it detected suspicious activity in a provider web portal. Its investigation found that an unauthorized person had reached records tied to those eligibility checks, with access reported to have started in November 2024. TPS told provider customers in December 2025, and the providers began sending patient letters in early 2026.

A filing with the Maine Attorney General, as reported by Security Affairs and Fox News, puts the total at 3,433,965 people. Many patients never dealt with TPS directly: they learned about it from their own hospital or clinic.

Sources checked: healthright360.org, bmc.org, securityaffairs.com

Last verified against the official page:

How we research this Report an error

What was exposed

The provider notices say the data may include names, addresses, dates of birth, Social Security numbers, health insurance member numbers, health insurer names and dependent information. TPS said payment card, bank account and other financial information was not affected.

A Social Security number plus a date of birth is what someone needs to open credit in your name. Insurance member numbers can be used to file false claims. Names and addresses give scammers what they need to write a believable message that mentions your provider.

The company's response

TPS brought in outside cybersecurity experts and told law enforcement. It is offering affected people credit monitoring and identity theft assistance through Kroll, with a call center on 844-572-2725.

What to do if you were in it

  1. 1

    Freeze your credit

    Because Social Security numbers may be involved, the FTC says a credit freeze is free and stops new accounts being opened in your name. Place it at Equifax, Experian and TransUnion.

  2. 2

    Read every insurance statement

    Check explanation of benefits statements and bills for care you didn't receive, and call your insurer if anything looks wrong.

  3. 3

    Use the free monitoring if you got a letter

    If your provider sent a notice, it explains how to sign up for the Kroll credit monitoring TPS is paying for. Use the contact details in your letter.

  4. 4

    Expect phishing that mentions your provider

    Don't click links or give out personal details in calls, texts or emails about this breach. Contact your provider using a number from your insurance card.

  5. 5

    Check whether your email or phone is in other breaches

    Run a free Serus scan to see whether your email address or phone number appears in this and other breaches.

Official filings

Timeline

  1. The breach happened

  2. The company made it public

  3. Reported to U.S. Department of Health and Human Services

Frequently asked

Was I affected by the TriZetto data breach?

If your hospital or clinic used TPS for insurance eligibility checks, you may have been. Affected people are being notified by letter, often from their provider. If you got one, treat your data as exposed.

What data was exposed in the TriZetto breach?

Names, addresses, dates of birth, Social Security numbers, health insurance member numbers and insurer details, per provider notices. TPS said financial information was not affected.

Should I freeze my credit?

If you received a notice that lists your Social Security number, yes. A freeze is free and you can lift it when you need to apply for credit.

Does Serus help after a breach like this?

Serus monitors breach databases and the dark web and alerts you if your details show up. Data that has already leaked can't be taken back, so the steps above matter most.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Serus

Check if you're exposed in a breach with Serus

Find your leaks. Get alerted to new ones.

Run a free scan

Related guides

All guides
How to opt out of prescreened credit card offers (OptOutPrescreen) optoutprescreen.com How to stop junk mail dmachoice.org Remove yourself from Equifax equifax.com Remove yourself from Experian experian.com

Related articles

All articles

How to Get My Information Off the Dark Web

What is the dark web? Definition and how it works

What Happens If Your Email Is on the Dark Web – And What to Do Next

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.