Planned Parenthood Northern California Data Breach Exposes Sensitive Patient Information Planned Parenthood Northern California (PPNorCal), a leading provider of sexual and reproductive health services across 20 counties, is investigating a data breach affecting an undisclosed number of patients. The incident stemmed from unauthorized access to systems managed by Trizetto Provider Solutions (TPS), a subcontractor of PPNorCal’s business associate, OCHIN. The breach was discovered on December 10, 2025, after TPS detected unauthorized activity in its information systems. The intrusion began in November 2024 and persisted until October 2, 2025, exposing sensitive patient data, including: - Names - Dates of birth - Social Security numbers - Health insurance details (member numbers, insurer names, Medicare identifiers) - Dependent and demographic information PPNorCal disclosed the breach to California’s Attorney General on December 30, 2025, and began notifying affected individuals by mail. While the exact number of impacted patients remains unspecified, PPNorCal serves approximately 90,000 patients annually, suggesting a potentially significant scope. TPS is offering free credit monitoring, credit reports, and credit score services to affected individuals, with enrollment details to be provided in early February 2026. A dedicated call center for inquiries will launch on February 9, 2026. Legal firms are also investigating potential compensation claims for those impacted. The breach highlights vulnerabilities in third-party vendor security, raising concerns about the protection of sensitive health and personal data.