A security incident at a healthcare technology provider exposed insurance and personal records belonging to millions of individuals.

TriZetto Provider Solutions, a healthcare IT company owned by Cognizant, confirmed a data breach that exposed sensitive data from more than 3.4 million people.

The company develops software used by health insurers and healthcare providers to manage patient coverage and insurance verification.

Unauthorized Access Lasted Nearly a Year

TriZetto detected suspicious activity on October 2, 2025. The company started an investigation with external cybersecurity experts.

The investigation revealed that attackers had gained access much earlier. Unauthorized access began on November 19, 2024.

During this period, attackers accessed records connected to insurance eligibility verification transactions. Healthcare providers use this process to confirm a patient’s insurance coverage before treatment.

Types of Data That May Have Been Exposed

The exposed information varies by individual. In some cases, attackers may have accessed the following data:

• Full names
• Home addresses
• Dates of birth
• Social Security numbers
• Health insurance member numbers
• Medicare beneficiary identifiers
• Provider names
• Health insurer names
• Health and demographic information

The company confirmed that payment card and bank account data were not exposed.

More Than 3.4 Million People Impacted

A report submitted to the Maine Attorney General confirmed that 3,433,965 individuals were affected.

TriZetto notified healthcare providers on December 9, 2025. The company began notifying affected individuals in February 2026.

TriZetto also reported the incident to law enforcement and strengthened security controls across its systems.

Identity Protection Services Offered

TriZetto offers 12 months of identity monitoring and credit protection to affected individuals. The services are provided through Kroll.

The company says it has not found evidence that attackers misused the exposed data.

Investigation Continues

No ransomware group has claimed responsibility for the breach so far. Investigators have also not found the data on underground forums.

Security researchers continue to investigate how attackers gained access to the system.

Healthcare Data Remains a Valuable Target

Cybercriminals often target healthcare organizations because they store large volumes of sensitive data.

Medical records contain identity information, insurance details, and personal data. Attackers can use this information for identity theft or fraud.

For this reason, healthcare systems and technology providers remain frequent targets for cyber attacks.