Major health provider data breach may have affected thousands more people – over 700k now thought to have been hit

In the data breach notification letter, it was said that TPS spotted unauthorized activity in October 2025 and launched an investigation, which determined that threat actors broke in almost a year prior – in November 2024. Since then, they have been exfiltrating sensitive personal and health data on more than 700,000 people.

You may like

The data belongs to TPS’ customers, it was said, and some of the affected organizations are Deschutes County Health Services, Best Care, and the La Pine Community Health Center. None of these companies were breached themselves – the breach occurred solely in TPS’ infrastructure.

The exposed data varies from person to person, but generally includes people’s names, addresses, birth dates, Social Security numbers (SSN), health insurer names, health insurance member numbers, and provider names.

DCHS stressed no medical diagnosis or treatment information, as well as payment data, was taken in the attack.

TriZetto Provider Solutions is a healthcare technology company and a subsidiary of Cognizant that provides healthcare organizations with software and services for revenue cycle management and claims processing.

Some of its customers include Denver Health and Hospital Authority, EmblemHealth, Bucksport Regional Health Center, and others.

We don’t know exactly how the attack happened, or who the threat actors were. The data, at press time, has not yet been abused in attacks, but it can be used in all sorts of scams. For example, crooks can run highly targeted scams and phishing, pretending to be a health insurer, tricking people into revealing more information, or making payments.