Lawsuit Alleges One Community Health Failed to Protect Patient Data in TriZetto Breach A patient of One Community Health in Sacramento has filed a class-action lawsuit, accusing the nonprofit health system of failing to safeguard sensitive patient data after a breach at TriZetto, a health IT vendor. The incident, which occurred in November 2024, went undetected until October 2025, when unauthorized access to patient records was publicly disclosed. TriZetto, a subsidiary of Cognizant, provides claims management and payer billing solutions. One Community Health (legally named Cares Community Health) used TriZetto’s services to handle patient and insurance billing, sharing records that included names, birth dates, Social Security numbers, insurance details, and treatment information. The lawsuit alleges these records were stored offsite by the vendor without adequate encryption or security measures. Plaintiff Scott Carucci, a One Community Health patient, claims his data was compromised in the breach. His lawsuit, filed on January 15, seeks class-action status, arguing that the health system’s alleged negligence including sharing unencrypted data and failing to vet TriZetto’s security practices enabled the attack. The complaint contends that stronger cybersecurity measures could have prevented the breach. The case underscores growing legal and regulatory scrutiny over third-party vendor risks in healthcare data security.