
On Nov. 1, 2024, Friends of Family Health Center, a nonprofit medical practice serving Orange, San Bernardino and Los Angeles counties, experienced a significant data breach via a third-party vendor, Trizetto Provider Solutions (TPS), that exposed both personally identifiable information (PII) and protected health information (PHI) of its patients and potentially other individuals associated with the organization.
Between November 2024 and October 2025, an unauthorized actor gained access to certain historical eligibility transaction reports stored within the TriZetto Provider Solutions system. This access occurred through a web portal that healthcare provider customers use to access TPS systems.
According to the Trizetto Provider Solutions data breach disclosure, information exposed in the breach included names of patients and primary insureds, addresses, dates of birth, Social Security numbers, health insurance member numbers (and in some cases, Medicare beneficiary numbers), health insurer names, information about the primary insured or beneficiary, and other demographic, medical and health insurance information.
The compromised data may put affected individuals at risk for identity theft or medical fraud. The method of intrusion and the identity of those responsible for the breach have not been detailed in the public notice, but the event was severe enough to require notification under California law.
Friends of Family Health Center disclosed the breach to the California Attorney General's office on Dec. 16, 2025. However, the notice has since been removed from the CA data breach portal. We will update this page with more information as it becomes available. Notices to impacted individuals are expected to be mailed in January 2026.
After discovering the breach, Friends of Family Health Center initiated an internal investigation and notified state authorities as required. The organization has taken steps to secure its systems and prevent further unauthorized access.
If you believe your personal information may have been compromised in this breach:








.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)