LifeLong Medical Care has confirmed that a vendor data breach involving TriZetto Provider Solutions exposed sensitive patient information, including Social Security numbers and health insurance data, between late 2024 and late 2025.
LifeLong Medical Care’s Data Breach Investigation
LifeLong Medical Care, a community-based healthcare provider, recently disclosed that one of its vendors, TriZetto Provider Solutions, experienced a prolonged data breach affecting patient insurance verification data. TriZetto, which supports insurance eligibility services for healthcare providers, identified suspicious activity on its systems and launched an internal investigation that revealed unauthorized access beginning in November 2024 and lasting through October 2025.
After a detailed forensic review, TriZetto began notifying affected healthcare clients, including LifeLong Medical Care, in December 2025. While LifeLong’s electronic health record system was not affected, patient insurance data accessed through TriZetto may have included deeply sensitive personal and medical information.
The exposed data includes names, addresses, Social Security numbers, dates of birth, Medicare and other insurance member numbers, and provider names. Although no financial or payment information was compromised, the type of data involved poses a substantial risk of identity theft and medical fraud.
In response, TriZetto has enlisted Kroll to provide identity monitoring and notification services to impacted individuals. Meanwhile, LifeLong Medical Care is working with its tech partner OCHIN to evaluate and strengthen internal and vendor-related security safeguards.
This breach highlights the growing risks patients face due to third-party service providers. Even if LifeLong’s core systems were unaffected, its patients are now at risk because of security failures beyond their control.
When Did This Breach Occur?
The unauthorized access occurred between November 2024 and October 2025, and LifeLong Medical Care was notified in December 2025.
What Information Was Breached?
Data exposed in this breach may include:
-
Full name
-
Address
-
Date of birth
-
Social Security number
-
Health insurance member number (including Medicare IDs)
-
Health insurer name and provider name
-
Other demographic, health, or insurance information
No financial account or payment card information was involved.
What You Can Do
If you’ve been notified by LifeLong Medical Care or suspect you may be affected:
-
Enroll in the complimentary identity monitoring services provided by Kroll as soon as possible.
-
Request your free credit reports from annualcreditreport.com or call 1-877-322-8228.
-
Monitor your health insurance and provider statements for unfamiliar activity or fraudulent claims.
-
Place a fraud alert or security freeze with major credit bureaus to prevent unauthorized credit activity.
-
Report any suspicious activity to your bank, insurance company, or the FTC at identitytheft.gov.
Although there’s no evidence of misuse yet, the nature of the data involved means affected individuals could be at risk for years to come. Don’t wait to protect your information—or to find out if you qualify for legal action.
File a Data Breach Lawsuit Against LifeLong Medical Care
If your data was compromised due to this third-party vendor breach, you may be eligible to join a class action lawsuit. LifeLong Medical Care and its vendor, TriZetto, had a responsibility to ensure your sensitive health information was adequately protected. When companies fail to safeguard personal data, the law provides a way for victims to seek justice.
Class action lawsuits can help individuals recover compensation for time, stress, and financial risk caused by the breach. Legal recourse may also prompt stronger protections to prevent future incidents.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
