Winters Healthcare
bd_44b716a170f9de05 · schema v1 · pii pii-v1
Full breach record for Winters Healthcare →Winters Healthcare notified patients of a data security incident involving a third-party vendor, TriZetto, which works with their electronic medical record system (OCHIN). An unauthorized individual gained access to TriZetto's systems. The breach may have exposed sensitive personal information including names, social security numbers, dates of birth, contact information, and health-related or insurance information. Winters Healthcare was notified by OCHIN on December 15, 2025. The organization is working with OCHIN to ensure security measures are in place and reviewing its own processes.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-617318
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 20, 2026
- Raw hash
- 68376d12f8f1a528ea159055bb9486c587826831181b88a16c2ba0e90d1132a3
Reporting entity
- Name
- Winters Healthcarenorm: winters healthcare
Victim entity
- Name
- Winters Healthcarenorm: winters healthcare
Incident
- Discovered
- Dec 15, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- Threat actor
- External
- Third party
- via TriZetto
- Initial access
- supply_chain
Compliance
- Time to disclose
- 5 weeks(36 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.