Bay Area Community Health is notifying patients about a recent data security incident involving a third-party technology provider, TriZetto. The incident affected systems connected to our electronic medical record platform, OCHIN.
While there is currently no evidence of misuse, we are sharing this information so patients can stay informed and take appropriate precautions.
What Happened Bay Area Community Health data breach
On December 15, 2025, Bay Area Community Health learned from OCHIN that an unauthorized individual gained access to one of TriZetto’s systems.
TriZetto immediately took action to stop the unauthorized activity and secure its systems. After learning that some patient data may have been affected, Bay Area Community Health began working closely with OCHIN to investigate the incident and protect patient information.
What Information Was Involved?
Based on information provided by TriZetto and OCHIN, the compromised data may have included certain personal and health-related details, such as:
Full name
Social Security number
Date of birth
Contact information
Health and insurance information
However, not every patient was affected. At this time, there is no evidence that any personal information has been misused.
What Bay Area Community Health Is Doing
Protecting patient privacy is a top priority. Therefore, Bay Area Community Health is taking the following steps:
Working with OCHIN to ensure strong security safeguards are in place
Monitoring vendor compliance with data protection standards
Reviewing internal security processes to reduce future risks
In addition, TriZetto has partnered with Kroll to provide notification services, a dedicated call center, and identity theft protection.
What Patients Can Do
Although there is no evidence of misuse, we recommend staying alert for unusual activity. For example:
Watch for unexpected medical bills or insurance statements
Be cautious of suspicious emails or phone calls requesting personal information
Monitor your bank and credit card accounts for unfamiliar transactions
If you notice anything unusual, contact your health insurer or financial institution immediately.
Legal Help?
Have you recieved the data breach letter
We want to help you understand your options. Fill out the online form