Cognizant TriZetto Data Breach Exposes Health Information of 3.4 Million Patients

Post Views: 8

A Major Data Breach at TriZetto Exposes Sensitive Health Information of 3.4 Million Patients

A significant cybersecurity incident has occurred at TriZetto Provider Solutions, a healthcare technology subsidiary of Cognizant, resulting in the exposure of sensitive health information belonging to approximately 3.4 million patients.

The breach, which was confirmed by the organization, highlights the growing cybersecurity risks facing healthcare supply chains and third-party technology providers that manage critical medical data.

Timeline of the Breach

The unauthorized access to TriZetto’s external systems first occurred on November 19, 2024, but the company did not discover the intrusion until November 28, 2025, allowing the attackers to remain undetected within the infrastructure for over a year.

The breach has been categorized as an external system hacking incident, during which cybercriminals extracted patients’ full names and other personal identifiers combined with sensitive healthcare information.

Response and Notification

Following the discovery of the compromised infrastructure, TriZetto launched a formal incident response investigation and began notifying affected individuals on February 6, 2026.

The stolen data includes personally identifiable information linked with medical records, which may put affected patients at risk of targeted spear-phishing attacks, medical identity theft, and financial fraud.

To comply with regulatory disclosure requirements, the company is sending written notification letters to all impacted patients. TriZetto has also partnered with the cybersecurity firm Kroll to support affected individuals.

Recommendations for Affected Patients

Cybersecurity experts are advising affected patients to take additional precautions, including freezing their credit reports and closely monitoring medical billing statements for any unauthorized or suspicious activity.

The incident serves as a reminder that healthcare technology providers remain prime targets for cybercriminals due to the high value of medical and personal data stored within their systems.

Experts emphasize that organizations must strengthen security monitoring, improve threat detection capabilities, and ensure timely incident response to prevent such breaches.

Support for Affected Patients

As part of its response measures, the company is offering 12 months of complimentary single-bureau credit monitoring and identity theft protection services.