Cognizant Technology Solutions is facing multiple class-action lawsuits following a significant data breach at TriZetto Provider Solutions (TPS), its healthcare claims processing subsidiary.
The lawsuits, filed in federal courts in New Jersey and Missouri, allege that the company failed to protect sensitive personal information and delayed disclosing the security incident.
According to court filings, hackers gained unauthorized access to TPS systems as early as November 2024. However, Cognizant did not discover the intrusion until October 2, 2025.
This means personal data remained exposed for nearly an entire year without the company’s knowledge. The breach affected at least 100 individuals across multiple states, including Arizona and California.
The exposed information includes highly sensitive personal details such as Social Security numbers, financial account information, and home addresses.
These types of data are particularly valuable to cybercriminals. They can be exploited for identity theft, fraud, and other malicious purposes.
The lawsuits accuse Cognizant and TriZetto of several failures, claiming the companies did not quickly notify affected individuals after discovering the breach.
Additionally, the lawsuits challenge the lack of transparency in public statements about the incident, noting that Cognizant provided insufficient details about the root cause and remedial measures implemented.
The legal complaints argue that delayed notification prevented victims from taking timely action to protect themselves against identity theft and financial fraud, leaving them vulnerable for months.
In a statement to CNBC-TV18, TriZetto said it considers the protection of information a top priority and regrets any inconvenience caused by the incident. However, the company declined to provide further details, citing ongoing litigation.
This breach highlights growing cybersecurity risks in the healthcare IT sector, where companies handle vast amounts of sensitive patient data and process claims for providers and insurers.
The incident underscores the critical importance of robust security measures and rapid breach response protocols. The full scope of the compromised data and potential financial impact remains unclear.
Cognizant has not disclosed estimates of possible costs associated with the lawsuits, settlements, or remediation efforts.
Follow us on Google News, LinkedIn, and X for daily cybersecurity updates. Contact us to feature your stories.
CDR is the runtime, real-time half of cloud security: while CSPM tells you what’s misconfigured,…
Your SaaS estate M365, Salesforce, Workday, Slack, hundreds of others is a sprawl of misconfigurations,…
DSPM finds sensitive data you didn’t know you had, classifies it, maps who can reach…
Open-source packages are meant to save developers time. In the GemStuffer campaign, that trust became…
Google has released an important Chrome 153 security update that fixes 42 vulnerabilities across the…
The Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology…