Skip to content

Western Health Advantage

Disclosed Dec 13, 20196 years ago869 affectedConfirmed

Official notice

Cognizant TriZetto Software Group, Inc., a business associate (BA) of Western Health Advantage, experienced a communication error while performing routine maintenance on its servers which allowed another covered entity to inadvertently download the electronic protected health information (ePHI) of 869 individuals. The ePHI involved included names, birthdates, addresses, diagnoses, clinical information, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the BA implemented additional technical safeguards to better protect its ePHI.

What is known

People affected869 (as reported to HHS)
DisclosedDec 13, 2019
HappenedOct 20, 2019
AttackInsider
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Western Health Advantageoag.ca.gov · Official notice
HHS OCR breach report (archive, resolved): Western Health Advantage (Health Plan, CA)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CADec 13, 2019
HHS archivetotalDec 13, 2019869
History of this record
  • 2026-09-25 · attack: unknown to insider · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 869 · backfill source
  • 2026-09-25 · summary: empty to Cognizant TriZetto Software Group, Inc., a business associate (BA) of Western Health Advantage, experienced a communication error while performing routine maintenance on its servers which allowed another covered entity to inadvertently down · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Western Health Advantage

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.