Third-Party Data Breach Triggers Patient Notifications Across Central Oregon

Deschutes County, OR. — Thousands of Central Oregon residents will soon receive letters notifying them that their personal information may have been exposed in a data breach involving TriZetto Provider Solutions (TPS), a third-party insurance eligibility verification vendor.

TPS provides services to health care organizations including Deschutes County Health Services (DCHS), Best Care, and La Pine Community Health Center (LCHC). Officials emphasized that the breach occurred entirely within TPS’s systems and did not compromise any county, Best Care, or LCHC networks.

According to information provided by TPS, the company discovered suspicious activity in one of its web portals in October and launched an investigation. Security experts later determined that an unauthorized actor began accessing historical eligibility reports stored in TPS’s environment starting in November 2024. The activity was stopped on Oct. 2, 2025.

The exposed reports may have contained protected health information related to insurance eligibility transactions. Potentially affected data varies by individual but may include names, addresses, dates of birth, Social Security numbers, insurer names, insurance member numbers, and provider names. No medical diagnoses, treatment information, or financial account data were involved.

TPS reported that the incident may have affected more than 700,000 people nationwide. DCHS, LCHC, and Best Care were notified of the breach on Dec. 10, 2025, and have since worked to identify impacted local patients and clients.

While TPS plans to notify affected individuals directly in February, the three Central Oregon providers opted to send their own notifications to avoid delays in offering protection services. LCHC expects to notify approximately 1,200 patients, DCHS about 1,300 clients or patients, and Best Care roughly 1,650 individuals.

Officials stated there is currently no evidence that exposed information has been misused. As a precaution, each organization is offering free identity protection services through IDX, including 12 months of credit and CyberScan monitoring, a $1 million insurance reimbursement policy, and fully managed identity theft recovery assistance.