Petaluma Health Center Data Breach Exposes Sensitive Patient Information Petaluma Health Center recently disclosed a data breach affecting sensitive personal and health-related information of its patients. On December 15, 2025, the center was alerted by its electronic medical record system, OCHIN, that an unauthorized individual had accessed a system belonging to TriZetto, a third-party vendor working with OCHIN. TriZetto’s investigation confirmed that patient data linked to Petaluma Health Center may have been exposed during the breach. The compromised information varies by individual but includes names, Social Security numbers, dates of birth, contact details, and health or insurance-related data. In response, Petaluma Health Center began notifying affected individuals via mail, detailing the specific types of information impacted. The center and TriZetto are also offering complimentary credit monitoring services to those affected. The breach notice was filed with the California Attorney General’s office.

CommuniCare+OLE Reports Data Breach Affecting Sensitive Patient Information CommuniCare+OLE, a healthcare provider, disclosed a data breach involving unauthorized access to sensitive personal and health information. On December 15, 2025, OCHIN CommuniCare+OLE’s electronic medical record system provider alerted the organization that an unauthorized individual had compromised a system managed by TriZetto, a third-party vendor. The breach prompted an investigation to assess the scope and impact. While details of the security incident remain undisclosed, affected data may include names, Social Security numbers, dates of birth, contact information, and health or insurance-related records. The exact information exposed varies by individual. CommuniCare+OLE has since begun notifying impacted individuals via mail, providing specifics on the compromised data. The breach notice filed with the California Attorney General’s office outlines the types of information potentially exposed. Further details can be found in the official notification documents.

Adapt Integrated Health Care Reports Third-Party Data Security Incident Adapt Integrated Health Care disclosed a data security incident involving TriZetto, a third-party vendor for its electronic medical record system provider, OCHIN. The breach was discovered on December 10, 2025, when OCHIN notified Adapt that an unauthorized individual had accessed one of TriZetto’s systems. TriZetto acted to halt the unauthorized activity and secure its systems. While Adapt’s internal systems were not directly breached, the incident may have exposed sensitive patient information. Not all patients were affected, and there is currently no evidence that the data has been misused. Potentially exposed data includes: - Names - Social Security numbers - Dates of birth - Contact information - Health-related and insurance details Adapt is collaborating with OCHIN to strengthen security measures and review its own processes to prevent future incidents. TriZetto plans to begin sending individual notification letters to affected patients in February 2026, with support from its vendor, Kroll, which will provide identity theft protection services, call center assistance, and credit monitoring enrollment instructions. For further details, patients may contact TriZetto’s dedicated call center at (844) 572-2724 or reach out to Heather Donohue, COO of TriZetto Provider Solutions, at (314) 802-6789.

TriZetto Confirms 2024 Cyberattack Exposing 3.4 Million Patients’ Data TriZetto, a major U.S. health technology provider under Cognizant, disclosed a 2024 cyberattack that compromised the personal and medical data of over 3.4 million individuals. The breach, detected on October 2, 2025, went unnoticed for nearly a year, with unauthorized access dating back to November 2024. The stolen data included sensitive information such as names, dates of birth, home addresses, Social Security numbers, health status details, provider names, and insurance records. TriZetto, which processes insurance eligibility for roughly 200 million patients through 875,000 healthcare providers, confirmed that patient eligibility reports were extracted from its servers. Multiple organizations, including OCHIN a nonprofit serving 300 U.S. providers and several California-based medical providers, verified that their patients’ data was exposed. However, TriZetto stated that not all clients were affected. The incident follows a 2024 ransomware attack on Change Healthcare, which resulted in the theft of 192 million patient files and caused widespread disruptions in medical services nationwide. TriZetto has not provided details on why the breach remained undetected for nearly a year, and Cognizant has not responded to requests for comment.

TriZetto Vendor Data Breach Exposes Patient Information in Third-Party Incident Adapt Integrated Health Care has disclosed a data breach involving TriZetto, a third-party vendor that provides electronic medical record services through OCHIN. The incident, first reported to Adapt on December 10, 2015, involved an unauthorized individual gaining access to one of TriZetto’s systems. Potentially compromised data includes names, Social Security numbers, dates of birth, contact details, health-related information, and insurance records. While not all patients were affected, TriZetto plans to begin sending individual notification letters in February 2026 to those impacted. Adapt confirmed that its internal systems were not breached the incident occurred at a subcontractor of one of its vendors. The organization is collaborating with OCHIN to strengthen security measures and review its own processes to prevent future risks. TriZetto has set up a dedicated call center (844-572-2724) and is working with vendor Kroll to provide notification services, call center support, and identity theft protection, including pre-paid credit monitoring for affected individuals. Additional updates may be sent by TriZetto or Kroll. The breach highlights the risks of third-party vendor vulnerabilities in healthcare data security.