Notice of Vendor Data Breach

Important Information Regarding TriZetto Provider Solutions Cybersecurity Incident

Dermatology of Philadelphia
Dermatology of South Jersey

TriZetto Provider Solutions ("TPS"), a vendor that provides billing-related services to our practice, has notified us of a cybersecurity incident that may have involved some protected health information of our patients. We are posting this notice to inform our patients about the incident and the steps that can be taken for further protection.

What Happened?

On October 2, 2025, TPS became aware of suspicious activity within a web portal that some of TPS's healthcare provider customers use to access their systems. Upon discovering the incident, TPS quickly launched an investigation and took steps to mitigate the issue. TPS also engaged external cybersecurity experts and notified law enforcement.

TPS determined that, beginning in November 2024, an unauthorized actor began accessing some records related to insurance eligibility verification transactions that healthcare providers process to assess insurance coverage for treatment services they provide to patients. A thorough review of the affected data was conducted to identify what information was involved and the individuals to whom the data related. TPS notified affected providers beginning on December 9, 2025.

What Information Was Involved?

On or around November 28, 2025, TPS learned that the affected data may have included:

Potentially Affected Information: Name, address, date of birth, Social Security number (for some individuals), health insurance member number (which, for some individuals, may be a Medicare beneficiary identifier), provider name, health insurer name, primary insured information, dependent information, and other demographic, health, and health insurance information.

Not Affected: The incident did not affect any payment card, bank account, or other financial information.

At this time, TPS is not aware of any identity theft or fraud related to the use of any affected individual's information.

What TPS Is Doing

After becoming aware of the incident, TPS immediately took additional protective measures to safeguard its systems and worked with leading cybersecurity experts to conduct a comprehensive investigation. TPS notified law enforcement and is cooperating with their investigation. TPS has eliminated the threat to the environment and implemented additional security protocols designed to enhance the security of its services.

Free Identity Monitoring Services

To help protect affected individuals, TPS is offering complimentary identity monitoring services through Kroll, including:

Services Provided by Kroll:

Single Bureau Credit Monitoring

Receive alerts when there are changes to your credit data—for instance, when a new line of credit is applied for in your name. If you do not recognize the activity, you'll have the option to call a Kroll fraud specialist to help determine if it is an indicator of identity theft.

Fraud Consultation

Unlimited access to consultation with a Kroll fraud specialist. Support includes showing you the most effective ways to help protect your identity, explaining your rights and protections under the law, assistance with fraud alerts, and interpreting how personal information is accessed and used.

Identity Theft Restoration

If you become a victim of identity theft, an experienced Kroll licensed investigator will work on your behalf to resolve related issues. You will have access to a dedicated investigator who understands your issues and can do most of the work for you.

Enroll in Free Credit Monitoring

Affected individuals who received a notification letter from TPS can enroll using the unique code provided in their letter.

Enroll at Kroll Monitoring

For more information about Kroll services, visit info.krollmonitoring.com

Note: To receive credit services, you must be over the age of 18 and have established credit in the U.S., have a Social Security number in your name, and have a U.S. residential address associated with your credit file.

What You Can Do

Although there is no evidence that any information has been subject to identity theft or fraud, you should always remain alert by regularly reviewing your account statements and monitoring free credit reports, and immediately reporting any suspicious activity to your banks and financial institutions.

Recommended Steps:

Review Your Credit Reports

Under federal law, you are entitled to one free copy of your credit report every 12 months from each of the three nationwide credit reporting agencies. Visit www.AnnualCreditReport.com or call 1-877-322-8228.

Place a Fraud Alert

You may place a fraud alert in your file by calling one of the three nationwide credit reporting agencies. A fraud alert tells creditors to follow certain procedures, including contacting you before they open any new accounts or change your existing accounts.

Place a Security Freeze

You have the right to place a security freeze on your credit report by contacting any of the credit bureaus. A security freeze is intended to prevent credit, loans, and services from being approved in your name without your consent. You can place and lift a security freeze free of charge.

Credit Reporting Agencies

Equifax

P.O. Box 105788

Atlanta, GA 30348

www.equifax.com

1-800-525-6285

Experian

P.O. Box 9554

Allen, TX 75013

www.experian.com

1-888-397-3742

TransUnion

P.O. Box 2000

Chester, PA 19016

www.transunion.com

1-800-680-7289

Federal Trade Commission

If you believe you are the victim of identity theft or have reason to believe your personal information has been misused, you may contact the FTC for information on how to prevent or avoid identity theft:

Federal Trade Commission
Consumer Response Center
600 Pennsylvania Avenue, NW
Washington, DC 20508
www.ftc.gov | 1-877-IDTHEFT (438-4338)

State-Specific Information

You may contact the Office of the Attorney General for the District of Columbia at: 441 4th Street, NW, Washington, DC 20001, 1-202-727-3400, www.oag.dc.gov

State law advises you to report any suspected identity theft to law enforcement or to the Iowa Attorney General, Consumer Protection Division, 1305 E. Walnut St., Des Moines, IA 50319, 1-888-777-4590.

You can contact the Maryland Office of the Attorney General, Consumer Protection Division at: 200 St. Paul Place, Baltimore, MD 21202, www.marylandattorneygeneral.gov, 1-888-743-0023.

Under Massachusetts law, you have the right to obtain any police report filed in regard to this incident. You also have the right to request a security freeze. Contact: Office of the Massachusetts Attorney General, One Ashburton Place, Boston, MA 02108, 1-617-727-8400, www.mass.gov/contact-the-attorneys-generals-office

You may contact the New Jersey Division of Consumer Affairs at: 124 Halsey Street, Newark, NJ 07102, 1-973-504-6200, www.njconsumeraffairs.gov

You have certain rights pursuant to the federal Fair Credit Reporting Act (FCRA). For more information about the FCRA, please visit www.ftc.gov/legal-library/browse/statutes/fair-credit-reporting-act

You can contact the New York Office of the Attorney General at www.ag.ny.gov, 1-800-771-7755; the New York Department of State at www.dos.ny.gov, 1-800-697-1220; and the New York Division of State Police at www.ny.gov/agencies/division-state-police, 1-914-834-9111.

You can contact the North Carolina Office of the Attorney General, Consumer Protection Division at: 9001 Mail Service Center, Raleigh, NC 27699-9001, https://ncdoj.gov, 1-877-566-7226.

State law advises you to report any suspected identity theft to law enforcement or to the FTC.

You may contact the Pennsylvania Office of the Attorney General at: Bureau of Consumer Protection, 15th Floor Strawberry Square, Harrisburg, PA 17120, 1-800-441-2555, www.attorneygeneral.gov

You have the right to obtain a police report and to request a security freeze. Contact: Rhode Island Office of the Attorney General, 150 South Main Street, Providence, RI 02903, www.riag.ri.gov, 1-401-274-4400. File a police report by calling 1-401-444-1000.

You have the right to ask that nationwide consumer reporting agencies place "fraud alerts" in your file to let potential creditors and others know that you may be a victim of identity theft. You also have a right to place a security freeze on your credit report.

Questions?

If you have questions regarding this incident, please contact the dedicated TPS call center.

Affected individuals who received a notification letter will find a toll-free number and unique code in their correspondence.

Hotline Hours: Monday – Friday, 8:00 a.m. – 5:30 p.m. Central Time
(excluding major U.S. holidays)