TriZetto Provider Solutions Data Breach: What Happened and What to Do

TriZetto Provider Solutions, a Cognizant company that serves healthcare providers, disclosed a data breach affecting about 3.4 million people. This explains what was reported, what data was involved and how to check a notice letter is genuine.

By · Updated

Holyprofweb editorial graphic: TriZetto breach

The “TPS scam” people are searching for is a data breach, not a scam. TriZetto Provider Solutions (TPS), a healthcare technology company owned by Cognizant, disclosed that an unauthorised party accessed data held for its healthcare-provider customers. The confusion comes from the notice letters: people receive an unexpected message about their health data and wonder whether the message itself is fake.

At a glance

  • Company: TriZetto Provider Solutions, owned by Cognizant Technology Solutions.
  • What it does: provides revenue-management and related services to healthcare providers in the United States.
  • Discovered: 2 October 2025, as suspicious activity in a web portal used by provider customers.
  • Unauthorised access began: as early as November 2024, according to the investigation as reported.
  • People affected: about 3.4 million, as reported from a filing with the Maine Attorney General.
  • Data involved: names, addresses, dates of birth, Social Security numbers, health insurance member numbers including Medicare identifiers, provider and insurer names, and other demographic and health-insurance information.
  • Not reported as affected: payment card, bank account and other financial details.

What happened

Infosecurity Magazine reports that TPS found suspicious activity in a web portal its healthcare customers use on 2 October 2025. Later reporting says the investigation found the unauthorised access had started as early as November 2024. TPS said it secured the portal and brought in an outside cybersecurity firm, and law enforcement and security partners were involved in the investigation. The company has said it removed the intruder from its systems and found no further access since the discovery.

Why you may get a letter

TPS works for healthcare providers, so patients usually have no direct relationship with it. Notices go to people whose data the providers shared with TPS, which is why a letter can arrive from a company you have never heard of. Reporting indicates affected people are offered monitoring services.

How to tell whether a notice is genuine

  • Do not use phone numbers or links printed only in an email or text you did not expect. Find the company’s contact details yourself from its official website and compare.
  • A genuine notice does not ask you for your full Social Security number, a password or a card number to “verify” your identity.
  • Check the sender against the provider you actually used. If you are unsure, call that provider using a number you already trust.
  • Be wary of any message that creates urgency or asks you to act within hours.

Sensible steps if your data may be involved

  1. Consider a credit freeze or fraud alert with the credit bureaus, which is free in the United States. The US Federal Trade Commission’s identitytheft.gov explains how.
  2. Read the explanation of benefits statements your insurer sends and report services you did not receive.
  3. Take up any monitoring offer through a route you have verified, not through a link in an unexpected message.

Legal action

Class-action lawsuits have been filed against TriZetto and Cognizant. They allege the companies did not adequately protect the information. These are allegations in court filings, not findings.

What we could not verify

We could not independently confirm the address of an official notice website, so we do not name one. We did not read the Maine Attorney General filing directly; the figures above come from the reporting linked below. Several of the pages we tried to open blocked our request, so details such as exact notification dates to providers and individuals are left out rather than guessed.

Sources

  1. Infosecurity Magazine: TriZetto Provider Solutions Breach Hits 3.4 Million Patients (citing the Maine Attorney General’s breach notification)
  2. Censinet: TriZetto Provider Solutions Reports Data Breach Impacting Healthcare Clients
  3. The HIPAA Guide: More Than 3.4 Million Individuals Affected by TriZetto Provider Solutions Data Breach
  4. Wolf Popper: TriZetto Data Breach Litigation (law firm page describing the lawsuits)
  5. US Federal Trade Commission: IdentityTheft.gov