TriZetto breach exposed health data of 3.43 million people

· Original article ↗

Summary

TriZetto says unauthorized access to an insurance eligibility portal exposed data linked to 3,433,965 people. The company says it has no reports of misuse, excluded financial data, and is offering identity protection.

Key points

  • TriZetto says unauthorized access began on November 19, 2024, and suspicious activity was detected on October 2, 2025.
  • The exposed records relate to insurance eligibility transactions and may include names, addresses, birth dates, Social Security numbers, insurance identifiers, and health-related information.
  • A Maine Attorney General filing cited in the article puts the number of affected individuals at 3,433,965.
  • TriZetto alerted providers on December 9, 2025, and began notifying customers in early February 2026.
  • The company says payment card and bank account data were not exposed and that it is not aware of misuse; it is offering 12 months of Kroll identity protection and credit monitoring.
  • TriZetto says it strengthened security measures and notified law enforcement. The article reports no ransomware group had claimed responsibility and no related data leak had appeared on underground forums.

Article Details

Victim Organization
TriZetto Provider Solutions
Incident Type
Data breach involving unauthorized access to an insurance eligibility verification web portal
Incident Date
2024-11-19
Data Types Exposed
  • Full names
  • Physical addresses
  • Dates of birth
  • Social Security numbers
  • Health insurance member numbers
  • Medicare beneficiary identifiers
  • Provider names
  • Health insurer names
  • Demographic information
  • Health information
  • Insurance information
Affected Records
3,433,965 individuals
Operational Impact
Unauthorized access began on November 19, 2024, and suspicious activity was detected on October 2, 2025. TriZetto says it strengthened security measures and informed law enforcement. No service disruption is reported.
Ransom Or Extortion
No ransomware group has claimed responsibility, and no related data leaks were reported. TriZetto says payment card, bank account, and other financial information were not exposed.
Claim Status
confirmed

Industries