LifeLong Medical Care Data Breach Investigation

Recently, LifeLong reported to the Attorney General of California that it had experienced a data breach in which sensitive personal identifiable information and protected health information in its care may have been compromised. According to the breach notice, on October 2, 2025, TriZetto provider Solutions (“TPS”), a business associate of LifeLong, became aware of suspicious activity within a web portal that some of TPS’s healthcare provider customers use to access its systems.¹ As a result, TPS launched an investigation to determine the nature of the incident.

Through its investigation, TPS confirmed to LifeLong that sensitive personal information in TPS systems related to LifeLong patients may have been accessed by an unauthorized third party beginning in November 2024. As a result, LifeLong began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:

• Name
• Social Security number
• Address
• Date of birth
• Health insurance member number (including Medicare beneficiary identifiers)
• Health insurer name
• Provider name
• Primary insured or dependent information
• Other demographic, health, and health insurance information

On January 14, 2026, LifeLong began mailing data breach notification letters to impacted individuals. Additionally, LifeLong posted notice of the breach on its website. Based on the breach notice sent to California residents, LifeLong and TPS are providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring services. A link to the form breach notification letters that LifeLong filed with the Attorney General of California is below.