Incident Summary

Overview

This memo provides a formal summary of a security incident involving TriZetto Provider Solutions (TPS), a subcontractor that provides clearinghouse services (claim submissions to insurance companies) for our practice. TPS has notified us that certain protected health information (PHI) associated with our patients and insured individuals was accessed by an unauthorized actor. The incident occurred within their system — not within our office systems or electronic medical records.

Summary of the Incident

• TPS detected suspicious activity in one of its provider web portals on October 2, 2025.
• An investigation determined that an unauthorized actor accessed historical eligibility transaction reports beginning in November 2024.
• Approximately 816 individuals associated with our practice were affected.
• The compromised data may have included:
  • Names
  • Addresses
  • Dates of birth
  • Social Security numbers
  • Insurance member numbers (including Medicare beneficiary identifiers in some cases)
  • Insurer names
  • Other demographic or insurance‑related information
• No payment card, bank account, or other financial information was involved.

TPS Response

• TPS immediately launched an investigation and engaged Mandiant, an external cybersecurity firm.
• The affected portal was secured, and the threat was eliminated.
• TPS notified law enforcement.
• No unauthorized activity has been detected since October 2, 2025.
• TPS has created a notification support portal where we can review affected data.

Support Offered to Our Practice

TPS is offering to handle legally required notifications, including:

• Notification letters to affected individuals
• Complimentary credit monitoring, fraud consultation, and identity restoration services through Kroll
• Notification to:
  • The U.S. Department of Health and Human Services Office for Civil Rights
  • State privacy regulators
  • Media outlets (if required due to volume thresholds)
  • Individuals with incomplete addresses via a substitute notice webpage

Thank you for your continued support of Cory J. Rubin MD, PC.  Feel free to reach out if you have any questions. For further information or inquiries, you may contact Jacquelin Walker at our hipaa-secure text messaging system at 248-970-9146 and put “Attention Jacquelin”  or please call our office at (248)-681-9541, and select 2 for our Livonia office.