HackingTechnologyHealthcareInformationStolen CredentialsData ExfiltratedCustomer Data InvolvedData EncryptedIdentity (basic)Government IDPHIHealth (basic)HighContained

TriZetto Provider Solutions

bd_d8d072b04feca193 · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 2, 2025

Filed

Feb 11, 2026

To disclose

19 weeks

Affected

1,795state residents only

Linked

13 filings

Confidence

65%

Full breach record for TriZetto Provider Solutions →4 incidents on file

TriZetto Provider Solutions (TPS) notified the New Hampshire Attorney General of a security incident involving unauthorized access to a web portal used by healthcare providers. TPS became aware of suspicious activity on October 2, 2025, and determined that an unauthorized actor accessed historical eligibility transaction reports containing PHI and PII (names, SSNs, DOB) starting November 2024. TPS engaged Mandiant, contained the threat, and notified approximately 1,795 New Hampshire residents. Remediation included portal security review and offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 335 days

discovery → filing · 19 weeks / 132 days

Nov 1, 2024

Begins

Oct 2, 2025

Discovered

Feb 11, 2026

Filed

vs. sector median

on median

This filing is one of 13 about the same incident.View merged incident

Part of TriZetto Provider Solutions supply-chain incident (2025) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_6134d3c7272644722026-02-11Verified by operator
Massachusetts State AGbd_c3aa17f3ff0b12182026-02-11Verified
Texas State AGbd_3dcd151ab202765f2026-02-09 · +2dVerified
HHS OCRbd_19390dc3934af63c2026-02-06 · +5dVerified

Show 6 more filings ↓up to 22d gap

Montana State AGbd_32b4937e7011ae892026-02-06 · +5dVerified
Nebraska State AGbd_3982aaa97bcc57b02026-02-06 · +5dVerified by operator
Indiana State AGbd_42e0b818cf987cd02026-02-06 · +5dVerified
Vermont State AGbd_7d1e2d4a707b85262026-02-06 · +5dVerified
South Carolina State AGbd_eb48dcb214315d162026-02-20 · +9dVerified by operator
Maine State AGbd_9e9cfe5bca10e7182026-03-05 · +22dVerified

Showing first 10 of 12 linked disclosures.

Name: McDermott Will & Schulte LLP
norm: mcdermott will schulte
Domain: mcdermottlaw.com

Name: TriZetto Provider Solutions
norm: trizetto provider
Domain: trizettoprovider.com
Industry: TechnologyllmHealthcarellm

Discovered: Oct 2, 2025
Breach occurred: Nov 1, 2024
Undetected for: 335 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 9, 2025
Affected individuals: 1,795state-resident count only
Data types: Identity (basic)Government IDPHIHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the U.S. Department of Health and Human Services Office for Civil Rights (OCR) pursuant to 45 CFR § 164.408Notified prominent media outlets pursuant to 45 CFR § 164.406Notified certain state regulatorsNotified consumer reporting agencies
Initial access: exploit_public_facing

During the incident: Engaged external cybersecurity experts at Mandiant
Reviewed the security of the affected web portal application
Eliminated the threat to the environment
Launched an investigation
Took steps to mitigate the issue
Identified affected customers, patients, and healthcare providers
Staged data and prepared notifications
Began notifying affected customers on December 9, 2025
Made available an online portal through Kroll
Notified affected upstream healthcare providers
Notified the U.S. Department of Health and Human Services Office for Civil Rights (OCR)
Notified prominent media outlets
Notified certain state regulators
Notified consumer reporting agencies
Notified affected individuals through first-class mail
Offered twelve (12) months of complimentary identity monitoring services
Changes made: Reviewed the security of the affected web portal application
Eliminated the threat to the environment
Continues to take steps to prevent a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(132 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 11 states

View merged incident ↗

HHS OCRFeb 6 · first

Montana State AGFeb 6 · first

Nebraska State AGFeb 6 · first

Indiana State AGFeb 6 · first

Vermont State AGFeb 6 · first

Texas State AG+3d

California State AG+5d

Massachusetts State AG+5d

New Hampshire State AG+5d · this page

South Carolina State AG+14d

Maine State AG+27d

Pattern: first filing Feb 6 (MO), last Mar 5 (ME) — a 27-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 12 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/trizetto-provider-solutions-20260211.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 11, 2026
Raw hash: dd0a58333ad4f181a090712816dc74aad05ae0726e8ff70a5bc9cd4534b5f17e

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityMcDermott Will & Schulte LLP

Victim entityTriZetto Provider Solutions

Incidentdiscovered Oct 2, 2025

Stated responseEngaged external cybersecurity experts at Mandiant

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov