TriZetto confirms 3.4M people’s health and personal data was stolen during breach

TriZetto, a leading health technology firm, has disclosed that a staggering 3.4 million individuals had their personal and medical information compromised in a cyber incident that took place in 2024. Alarmingly, the breach went undetected for nearly a year, raising concerns about cybersecurity protocols within the company. Owned by the multinational conglomerate Cognizant, TriZetto plays a crucial role in the healthcare sector, serving around 200 million people through approximately 875,000 healthcare providers across the United States. Its systems are used by medical offices to verify patients' insurance for treatments. In a recent communication with Maine's attorney general, TriZetto reported that hackers accessed sensitive insurance eligibility transaction reports stored on its servers. The stolen data encompasses critical personal information, including names, birth dates, home addresses, and Social Security numbers, alongside healthcare-related details such as provider names and insurance specifics. The breach was identified on October 2, 2025, but investigations revealed that the unauthorized access had been ongoing since November 2024. While Cognizant has not yet provided a response to inquiries about the delay in breach detection, the ramifications are significant, affecting numerous organizations reliant on TriZetto’s services. OCHIN, a nonprofit organization that offers healthcare technology to around 300 rural and community care providers, is among those confirming the compromise of their patients' information. Although TriZetto stated that not all customers were impacted, this incident underscores a troubling trend in the health tech industry. In 2024, another major player, Change Healthcare, suffered a ransomware attack that led to the theft of over 192 million patient files, causing widespread disruptions in access to medical care across the nation.