Cognizant Faces Multiple US Class-Action Lawsuits After TriZetto Data Breach
## Data Breach Incident at Cognizant Subsidiary
Data Breach Incident at Cognizant Subsidiary
Cognizant Technology Solutions is currently addressing a series of legal challenges in the United States following a data breach at its subsidiary, TriZetto Provider Solutions (TPS). The company faces at least three class-action lawsuits that claim it inadequately protected sensitive healthcare data and delayed notifying affected individuals.
According to court documents filed in federal courts in New Jersey and Missouri, the security breach was significant. Unauthorized access to TriZetto’s systems reportedly began in November 2024, but Cognizant did not detect the intrusion until October 2, 2025. This situation left sensitive data, including Social Security numbers, financial account details, and home addresses, vulnerable for approximately 11 months.
The lawsuits, initiated by plaintiffs from various states such as Arizona and California, accuse Cognizant and TPS of negligence due to insufficient security measures to protect personal information. The complaints also criticize the delay in disclosing the breach, arguing it hindered victims from taking protective measures against identity theft and fraud. Additionally, there are concerns about a lack of transparency regarding the breach's root cause and remedial actions.
According to court documents filed in federal courts in New Jersey and Missouri, the security breach was significant.
Cognizant and TriZetto have affirmed their commitment to data security. A spokesperson for TriZetto stated that the company prioritizes information protection and regrets any inconvenience caused by the incident. However, further comments were withheld due to ongoing litigation.
This incident highlights the increasing risks within the healthcare IT sector, where vendors manage large volumes of sensitive data. As the lawsuits unfold, they will likely examine the duration of undetected intrusion and evaluate the adequacy of the company’s response in meeting legal and ethical standards.
Based on reporting by GBHackers.
