FOLLOW US

Cognizant Technology Solutions Corp. is facing mounting legal pressure in the United States as class-action lawsuits accuse the company of failing to promptly disclose a major cyber intrusion tied to its healthcare subsidiary, TriZetto — a lapse plaintiffs say left sensitive personal data exposed for months.

At the heart of the dispute is the cognizant trizetto data breach, which attorneys argue unfolded quietly, like a slow-burning fuse, before erupting into litigation late last year.

Alleged Breach Went Unreported for Nearly a Year

According to court filings, hackers infiltrated Cognizant’s computer network and gained access to protected private information handled by TriZetto, a healthcare claims processing unit. The breach allegedly began around November 2024, but Cognizant says it did not discover the unauthorized access until Oct. 2, 2025 — nearly a year later.

Plaintiffs including Liam Lytle, Maricruz Jimenez, and Carson Noel claim the breach affected at least 100 people across multiple U.S. states, exposing data such as Social Security numbers, financial account details, and home addresses.

The lawsuits contend that Cognizant and TriZetto either knew or should have known about the intrusion far earlier and failed to alert victims in time to protect themselves from identity theft and fraud.

Claims of Delayed Disclosure and Financial Harm

Filed in late December by individuals in states including Arizona and California, the complaints accuse TriZetto of moving unreasonably slowly after the breach. Plaintiffs say that delay magnified financial losses and robbed victims of the chance to take immediate defensive steps, such as freezing credit or monitoring accounts.

The legal actions seek more than $5 million in damages, not including interest or attorneys’ fees. They allege at least 18 separate violations, including unfairly retaining profits while failing to safeguard patient data — despite being paid to do exactly that.

Plaintiffs are asking for jury trials, monetary compensation, legal costs, and court-ordered remedies such as regular third-party cybersecurity audits and the deletion of stored data unless a legitimate business need is demonstrated.

Cognizant Responds Cautiously

A Cognizant spokesperson said TriZetto Provider Solutions “takes the protection of information very seriously” and expressed regret for any inconvenience caused. Citing ongoing litigation, the company declined to elaborate further.

A High-Stakes Acquisition Now Under Scrutiny

Cognizant acquired TriZetto in September 2014 for $2.7 billion, one of the largest overseas acquisitions by an Indian IT services firm at the time. The deal turbocharged Cognizant’s healthcare business, which has since grown into its largest segment, accounting for nearly one-third of total revenue.

In 2024, Cognizant reported $19.74 billion in revenue, underscoring the scale of operations now shadowed by the breach allegations.

What Comes Next

Industry analysts say the lawsuits could stretch on for more than a year before any resolution. Peter Bendor-Samuel, founder of IT research firm Everest Group, said cyber risks are universal in tech services, but Cognizant’s blend of software platforms and outsourcing heightens its exposure.

He noted that such cases are often covered by insurance, though total costs can still reach tens of millions of dollars. The dispute highlights the growing cyber threats facing healthcare claims processors, which sit atop vast troves of sensitive patient data.

Market and Industry Impact

The lawsuits could weigh on Cognizant’s stock and reputation, potentially driving higher compliance and security costs. For the broader Indian IT sector, the case serves as a cautionary tale — a reminder that in healthcare IT, a single breach can ripple outward like a cracked dam, shaking confidence far beyond one company.