Cognizant Faces Multiple Class-Action Lawsuits in the US Over TriZetto Data Breach

Cognizant Technology Solutions has come under legal scrutiny in the United States after a cyber incident at its healthcare-focused subsidiary, TriZetto Provider Solutions, led to allegations of delayed detection and inadequate disclosure of a data breach involving sensitive personal information. 

Key Development 

Several class-action lawsuits have been filed in federal courts, accusing Cognizant and its TriZetto unit of failing to implement reasonable safeguards to protect private data and of not notifying affected individuals within a reasonable timeframe.  

The complaints allege that unauthorised access to TriZetto’s systems began as early as November 2024, while the breach was only identified in October 2025, allowing data exposure to persist for nearly a year. 

Allegations and Impact 

The plaintiffs claim that personal and financial information including Social Security numbers, bank account details and residential addresses was compromised. They argue that the delayed disclosure limited their ability to take preventive measures against identity theft and financial fraud.  

The lawsuits also criticise the limited information shared publicly about the incident, including a lack of clarity on how the breach occurred and what corrective steps were taken. 

Company Response and Broader Context 

Cognizant and TriZetto have acknowledged the incident, stating that data security is taken seriously and expressing regret over any inconvenience caused. However, both have refrained from detailed commentary due to the ongoing legal proceedings.  

The case highlights the heightened risks faced by healthcare IT service providers, which manage large volumes of highly sensitive data for insurers and healthcare organisations. 

Read More: Tesla Registrations Show Mixed Trends Across European Markets! 

Conclusion 

As the legal process unfolds, the full scale of the breach and the potential financial and reputational consequences for Cognizant remain uncertain. The lawsuits underscore the growing expectations around cybersecurity resilience and transparency, particularly in healthcare technology, where prolonged data exposure can carry serious consequences for both companies and individuals. 

Disclaimer: This blog has been written exclusively for educational purposes. The securities mentioned are only examples and not recommendations. This does not constitute a personal recommendation/investment advice. It does not aim to influence any individual or entity to make investment decisions. Recipients should conduct their own research and assessments to form an independent opinion about investment decisions.  

Investments in the securities market are subject to market risks, read all the related documents carefully before investing.