Was It Breached Secria

Recent breaches

TriZetto data breach: is the letter real, and what to do

TriZetto Provider Solutions, a Cognizant company, handles insurance and billing work for doctors and hospitals. Its report to federal health regulators covers 3,433,965 people, as of 29 October 2026.1

Data Breach Notification Center
Return to Kroll
Return address

Date

Dear First name Last name:

... TPS provides billing-related services to healthcare providers, such as hospitals, health systems, and physician practices, including your healthcare provider.

... the affected data may have included your name, address, date of birth, Social Security number, health insurance member number ...

To enroll in Kroll credit monitoring services at no charge, please log on to enroll.krollmonitoring.com and follow the instructions provided.

  1. Sent through KrollThe filed sample is headed "Data Breach Notification Center" with a Kroll return address, and points to TPS's notice site, tpsincident.kroll.com, which repeats the letter.2,3
  2. Why TriZetto has your dataIt works behind your doctor, hospital or clinic, so most people who get a letter have never dealt with it directly.2
  3. What leakedSome people's member number is a Medicare number. The company says no card, bank or other financial data was involved.2
  4. The enrollment siteType it in yourself, with the unique code printed in your letter.2

Drawn from the adult sample letter TriZetto Provider Solutions filed with California's attorney general. Checked 29 October 2026 against the sources.

The facts, as filed

"The company says" marks TriZetto's own account. A listing here isn't a finding that the company was at fault.

What happened
The company says it found suspicious activity on 2 October 2025 in a web portal its provider customers use, and that an unauthorized actor had been accessing insurance eligibility records since November 2024.2
People affected
3,433,965 in TriZetto's report to the HHS breach portal, filed 6 February 2026, as of 29 October 2026.1 Indiana's attorney general lists the same total, with 7,155 Indiana residents.4 Its Texas filing, published 2 June 2026, counts 312,562 Texans.5
What leaked
The letter lists name, address, date of birth, Social Security number, health insurance member number (for some people, a Medicare number), provider and insurer names, primary insured details, and other demographic, health and insurance information.2
Who sends the letter
TPS says it told affected providers from 9 December 2025 and offered to send the notices for them. Where a provider accepted, the letter comes from TPS; other providers send their own.3
Monitoring offer
Kroll single-bureau credit monitoring, fraud consultation and identity theft restoration at no cost. TPS's notice site gives 9 August 2026 as the enrollment deadline.3
Lawsuit
The federal courts' panel on multidistrict litigation combined 19 cases on 5 June 2026 as In re Cognizant Technology Solutions Corporation and TriZetto Provider Solutions, LLC, Data Breach Security Litigation, MDL No. 3185, before Judge John A. Ross in the Eastern District of Missouri. The court's case page lists no settlement.7

Eleven months inside, then a long trail of letters

The dates come from TriZetto's letter, its filings and the court's case page.

  1. Access to eligibility records begins, the company says.2

  2. TPS spots suspicious activity in the provider portal.2

  3. TPS starts telling the affected providers.3

  4. Report filed with HHS: 3,433,965 people.1

  5. Nineteen federal cases combined in Missouri.7

What to do if you got a TriZetto letter

Match the steps to the data your letter lists. The full checklist covers every data type.

  1. Check the enrollment date in your letter.IdentityTheft.gov says to accept free credit monitoring when a company offers it. If your date has passed, call TPS's line at (844) 572-2725.8,3
  2. Social Security number listed: freeze your credit.While a freeze is in place, nobody can open a new credit account in your name. It's free to place and to lift.8
  3. Get an IRS identity protection PIN.The six-digit IP PIN stops someone else filing a tax return with your Social Security number.9
  4. Medicare or insurance number listed: tell the plan.Report it and order a new card if needed. For Medicare, call 1-800-MEDICARE (1-800-633-4227).8

Questions people ask

Is the TriZetto data breach letter real or fake?

Compare yours with the sample TriZetto filed with California's attorney general: the Kroll return address, the line about billing services for your healthcare provider, and enrollment at enroll.krollmonitoring.com.2 TPS's own notice site, tpsincident.kroll.com, repeats the letter and gives the call center number, (844) 572-2725.3 If anything differs, call your provider on a number you look up yourself.8

What providers are affected by the TriZetto breach?

TPS's notice doesn't list them. The letter refers to "your healthcare provider", so ask the doctor or clinic you use.2,3 Some providers filed their own notices: Edinger Medical Group filed one with California on 7 January 2026 that names TriZetto.6

Is there a TriZetto data breach settlement?

We found none as of 29 October 2026. The combined federal case in Missouri continues, and the court's case page lists orders through 9 October 2026 but no settlement.7 A real settlement comes with a court-approved notice that names the case. This isn't legal advice.

Sources 9
  1. Breach Portal: HIPAA cases currently under investigation, U.S. Department of Health and Human Services, Office for Civil Rights. Full list exported as CSV. Read 29 October 2026.
  2. TriZetto Provider Solutions: filing and sample notice (reported 11 February 2026), California Attorney General. Read 29 October 2026.
  3. Notice of Data Breach, TriZetto Provider Solutions, hosted by Kroll. Read 29 October 2026.
  4. Data breach year-to-date report, October 2026, Office of the Indiana Attorney General. Read 29 October 2026.
  5. Data Security Breach Reports, Office of the Texas Attorney General. TriZetto Provider Solutions, published 2 June 2026. Read 29 October 2026.
  6. Search data security breaches: TriZetto, California Department of Justice, Office of the Attorney General. Read 29 October 2026.
  7. In re Cognizant Technology Solutions Corporation and TriZetto Provider Solutions, LLC, Data Breach Security Litigation, MDL No. 3185, U.S. District Court for the Eastern District of Missouri. Read 29 October 2026.
  8. What To Do if Your Information Was Lost or Stolen, or Part of a Data Breach, IdentityTheft.gov, Federal Trade Commission. Read 29 October 2026.
  9. Get an identity protection PIN (IP PIN) (reviewed 4 August 2026), Internal Revenue Service. Read 29 October 2026.

Every breach is checked against the company's own notice and a government record, and every source shows the day we read it. How we check