TriWest Healthcare Alliance Reports Data Breach Impacting Military Families TriWest Healthcare Alliance, a Phoenix-based provider administering healthcare programs for U.S. military service members, veterans, and their families, disclosed a data breach exposing sensitive personal and health insurance information. The incident was reported to the Texas Attorney General on July 7, 2026, with 2,408 Texas residents confirmed as affected. The breach compromised personally identifiable information (PII) and protected health information (PHI), including names and health insurance details. TriWest has since notified impacted individuals via U.S. Mail. The company has not publicly disclosed the cause or timeline of the breach. The exposure of such data raises concerns about potential identity theft and fraud risks for those affected.

TriWest Healthcare Data Breach Exposes Sensitive TRICARE Beneficiary Information TriWest Healthcare Alliance, a contractor managing healthcare programs for the U.S. Department of Defense (DoD) and Department of Veterans Affairs (VA), confirmed a data breach affecting approximately 12,000 TRICARE beneficiaries. The incident, discovered on April 16, 2023, resulted from a vishing attack in which a threat actor impersonated IT support to deceive a contact center agent into accessing a malicious website. The compromised data includes names, DoD Benefits numbers, ZIP codes, and in some cases, Social Security numbers, addresses, and dates of birth. TriWest stated that it contained the breach upon detection and has begun notifying affected individuals. No group has claimed responsibility, and the stolen data has not been identified online. Separately, TriWest disclosed a credential-stuffing attack between April and September 2023 that exposed data belonging to 6.9 million customers, including sensitive genetic ancestry information though this appears unrelated to the April breach. In a separate incident, Partnered Health, an Australian healthcare provider, reported a cyberattack on June 23, 2024, compromising patient data across 21 clinics in New South Wales, Victoria, Queensland, Western Australia, and the Australian Capital Territory. The Australian regulator later declined to hold Qantas accountable for a prior data exposure affecting 5.67 million customers.