Supply chain
⛓ Supply Chain
Trizetto Provider Solutions 2024 Hack Detected 2025 — 3.4 Million Billing Records
Primary Source ↗Incident Details
Trizetto Provider Solutions (a Cognizant subsidiary providing healthcare billing, revenue cycle management,
and claims processing services to hospitals and physician practices) notified 3.4 million individuals of a
2024 hack that was not detected until 2025. The multi-month dwell time before detection allowed extensive data
exfiltration. Trizetto serves thousands of healthcare providers and payers, making it a high-value supply
chain target for access to patient billing and clinical data. Exposed data included patient names, dates of
service, insurance information, procedure codes, and Social Security numbers for patients whose claims were
processed through Trizetto. HHS OCR was notified. The delayed detection (breach in 2024, discovered 2025) is
consistent with sophisticated threat actors who evade detection by blending with normal healthcare billing
traffic patterns.
Technical Details
- Initial Attack Vector
- Unknown attacker breached Trizetto Provider Solutions' healthcare billing and revenue cycle management platform in 2024; breach was not detected until 2025
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2026-03-05 Breach occurred
- 2026-03-05 Publicly disclosed