South Central Public Health District Data Breach

SCPHD has disclosed a data breach involving personal health information (PHI) from its external vendor, TriZetto Provider Solutions (TPS). Approximately 154 individuals may have had their personal details exposed, including Social Security numbers and health insurance information. If you were impacted, you may be eligible to participate in a class action lawsuit for compensation.

South Central Public Health District
Date of Breach: December 9, 2025
CAU logo

Who was affected:

Clients of South Central Public Health District

Impacted Data:

Name

Address

Date of Birth

Social Security Number

Health Insurance Member Number (which may include Medicare Beneficiary Identifiers)

Health Insurer Name

Primary Insured or Dependent Information

Other Demographic, Health, or Health Insurance Details

SCPHD (South Central Public Health District) was recently notified of a data breach stemming from one of its external vendors, TriZetto Provider Solutions (TPS). The breach, which began in November 2024, involved unauthorized access to certain historical eligibility transaction reports containing sensitive personal health information (PHI).

SCPHD Data Breach Investigation

SCPHD was officially notified of the breach on December 9, 2025, after TriZetto Provider Solutions (TPS) discovered suspicious activity in their system. The breach originated from November 2024, when an unauthorized actor accessed historical eligibility transaction reports that stored protected health information (PHI) for individuals associated with SCPHD.

TPS acted quickly to secure its environment, bringing in Mandiant, a leading cybersecurity firm, to investigate and address the vulnerability. Their investigation revealed that the compromised data belonged to 154 individuals, including patients and primary insured individuals. Fortunately, TPS reported the breach to law enforcement and confirmed that there had been no further unauthorized activity in their system since October 2, 2025.

The breach involved sensitive personal information, including Social Security numbers and health insurance details, but did not extend to financial information such as payment card or bank account details.

When Did This Breach Occur?

The breach started in November 2024 when an unauthorized actor accessed certain eligibility transaction reports within the TPS system. The breach was discovered by TPS on October 2, 2025, and they took immediate action to investigate and resolve the issue. The notification to affected individuals came on December 9, 2025.

What Information Was Breached?

The following personal information was exposed due to the breach:

  • Name

  • Address

  • Date of Birth

  • Social Security Number

  • Health Insurance Member Number (which may include Medicare Beneficiary Identifiers)

  • Health Insurer Name

  • Primary Insured or Dependent Information

  • Other Demographic, Health, or Health Insurance Details

Importantly, the breach did not involve payment card, bank account, or other financial information.

What You Can Do

If you were affected by this data breach, there are several steps you can take to protect your personal information:

  1. Monitor Your Financial Accounts
    Regularly check your credit card and bank statements for unauthorized transactions. Setting up alerts with your financial institutions can help detect fraudulent activity.

  2. Review Your Credit Reports
    Request a free credit report from each of the three major credit bureaus (Experian, Equifax, and TransUnion) to monitor for any signs of identity theft or unauthorized accounts opened in your name.

  3. Protect Your Health Information
    If your health insurance information was exposed, contact your health insurer or provider to ensure your accounts are secured against potential fraud.

  4. Consider Enrolling in Credit Monitoring
    You may want to consider enrolling in credit monitoring services to receive alerts about changes to your credit file. This service will notify you immediately if there are any changes or suspicious activities.

  5. Report Any Suspicious Activity
    If you notice anything unusual in your accounts or suspect identity theft, contact your financial institutions and report it to the relevant authorities immediately.

File a Data Breach Lawsuit Against SCPHD

If you were affected by this data breach, you may be entitled to compensation. Class action lawsuits provide a way for individuals affected by a breach to band together and hold organizations accountable for mishandling sensitive data.

SCPHD, along with its external vendor TPS, is responsible for safeguarding your personal health information. If this breach has impacted you, now is the time to take action and explore your legal options.

Contact us today at Class Action U, where we’ll connect you with experienced attorneys specializing in data breach cases. Our legal partners can help you determine if you qualify to join a class action lawsuit and assist you in recovering the compensation you deserve.

Don’t wait—fill out our quick, easy, and secure form to get started with a free consultation. There’s no cost to speak with our legal partners, and no obligation to proceed after your consultation. If you’ve been affected, now is the time to act.

Subscribe To Our Newsletter

New cases and investigations, settlement deadlines, and news straight to your inbox.

This field is for validation purposes and should be left unchanged.
Other Data Breaches
Date of Breach: December 9, 2025
Date of Breach: Not Specified
Date of Breach: May 17, 2025, to July 11, 2025

Frequently Asked Questions

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.