INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

TriZetto Provider Solutions Exposed Patient Data of 3.4 Million

| 2026-03-09 10:45 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
A breach at TriZetto Provider Solutions (TPS), owned by US IT services firm Cognizant Technology Solutions, compromised the personal and health insurance information of millions of patients. The incident affected approximately 3.4 million individuals, primarily in the healthcare sector. TPS discovered suspicious activity on a web portal used by some of its healthcare provider customers on October 2, 2025. No payment card or financial details were taken during the breach, but names, addresses, dates of birth, Social Security numbers, and health insurance information may have been compromised. The attack is believed to be related to TriZetto Provider Solutions' data handling practices, although no ransomware was explicitly mentioned as a malware payload in this incident; however, it's worth noting that Cognizant experienced a ransomware attack by the Maze group in April 2020. TPS has implemented additional security protocols and is providing credent monitoring services to those affected, following investigations by law enforcement and security partners.
Technical Mitigations AI-generated
• Implement additional security protocols, such as those claimed by TPS to be certified to SOC 2, EHNAC and HITRUST. • Monitor for suspicious activity in web portals used by healthcare provider customers. • Block or hunt for Social Security numbers, health insurance member numbers (including Medicare identifiers), and other demographic information that may have been compromised.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
MazeMaze
Target & Sectors
Global Scope financefinance healthhealth technologytechnology
Incident Timeline
‎April 2020
A Cognizant helpdesk staffer's unauthorized password reset allowed a threat actor to access the network, resulting in a breach that cost Clorox $49 million.
financial $49 $ m.
The lawsuit alleges that a Cognizant helpdesk staffer reset an employee password without following the firm’s security protocols, enabling a threat actor to access its network in a breach said to have cost Clorox $49m.
‎October 2 2025
The Maze group launched a ransomware attack on TriZetto Provider Solutions in April 2020, resulting in an estimated $50-70 million in expected costs.
financial 70 $ m.
A ransomware attack by the Maze group back in April 2020 resulted in expected costs of $50-70m. Last year, the firm was sued by one of its clients, cleaning products provider Clorox, after a 2023 cyber attack.
Tactical Metrics
Metrics
financial
70
$ M.
A ransomware attack by the Maze group back in April 2020 resulted in expected costs of $50-70m. Last year, the firm was sued by one of its clients, cleaning products provider Clorox, after a 2023 cyber attack.
Metrics
financial
49
$ M.
The lawsuit alleges that a Cognizant helpdesk staffer reset an employee password without following the firm’s security protocols, enabling a threat actor to access its network in a breach said to have cost Clorox $49m.
Intelligence Sources
Infosecurity-Magazine 2026-03-09