Variety Care Data Breach Investigation

Recently, Variety Care announced that it had experienced a data breach in which sensitive personal identifiable information and protected health information in its care may have been compromised. According to the breach notice shared on its website, on October 2, 2025, TriZetto Provider Solutions (“TPS”), a business associate of Variety Care, became aware of suspicious activity within a web portal that some of TPS’s healthcare provider customers use to access Variety Care’s systems.¹ As a result, TPS launched an investigation to determine the nature of the incident.

Through its investigation, TPS confirmed to Variety Care that sensitive personal information in TPS systems related to Variety Care patients may have been accessed by an unauthorized third party beginning in November 2024. As a result, Variety Care began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:

• Name
• Social Security number
• Address
• Date of birth
• Health insurance member number (including Medicare beneficiary identifiers)
• Health insurer name
• Provider name
• Primary insured or dependent information
• Other demographic, health, and health insurance information

As a result of the breach, Variety Care posted notice of the breach on its website. Additionally, on December 22, 2025, Variety Care filed official notice of the data breach with the U.S. Department of Health and Human Services’ Office for Civil Rights.⁵ Based on the website breach notice, Variety Care and TPS are providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring services. A link to the website breach notice is below.