TriZetto data breach affects thousands more Oregonians

Thousands more Oregonians are set to receive data breach notification letters following a significant cyberattack on TriZetto Provider Solutions, an insurance verification provider. The breach, which occurred in November 2024, saw unauthorized access to sensitive health information of hundreds of thousands of patients across multiple states, as reported by The Register.

TriZetto Provider Solutions (TPS), owned by Cognizant, discovered the intrusion on October 2, 2025, nearly a year after the initial breach. The attackers gained access to protected health information (PHI) and other personal data. Three Oregon healthcare providers—Deschutes County Health Services, Best Care, and La Pine Community Health Center—are notifying approximately 1,300, 1,650, and 1,200 patients respectively.

While no evidence of misuse like identity theft or medical fraud has been found, and no financial data was compromised, the breach has led to multiple class-action lawsuits against Cognizant. The company has engaged cybersecurity firm Mandiant and notified law enforcement.

Source: The Register