On or around December 10, 2025, Santa Rosa Community Health Center was notified by OCHIN that an unauthorized individual had gained access to one of TriZetto’s systems, a third‑party company that supports their electronic medical record platform. The breach occurred within TriZetto’s environment, and the company took immediate steps to stop the unauthorized activity and secure its systems. The health center then began investigating the scope of the incident to understand how patients may have been affected.
Located in Santa Rosa, California, Santa Rosa Community Health Center is a medical provider that partners with OCHIN and TriZetto for electronic medical records and insurance‑related services to low-income, uninsured, and diverse residents of Sonoma County, focusing on primary care, family health, and cu8lturally responsive services across multiple campuses.
Following the incident, TriZetto engaged Kroll to provide notification services, call center support, and identity theft protection services to the individuals affected.
The organization sent data breach notification letters to affected individuals and confirmed that Kroll will provide further instructions at a later date regarding complimentary identity protection services.
If you received a Data Breach notification letter from Santa Rosa Community Health Center, it confirms that your information was potentially impacted.
What information is involved in the Santa Rosa Community Healt Center Data Breach?
Compromised information may include:
Name
Social Security Number
Date of Birth
Contact Information
Certain Health-Related or Insurance Information
Your Personally Identifiable Information (PII) includes details that can be used to identify you. Organizations are legally obligated to safeguard this data, and failure to do so can result in statutory fines and other legal consequences. If PII is stolen, it may be exploited by criminals to commit identity fraud.
A specific category of PII is Protected Health Information (PHI), which pertains to personal medical data. PHI is safeguarded under both federal and state regulations. Entities such as healthcare providers and businesses that manage PHI must ensure its security. Just like PII, compromised PHI can be misused by identity thieves, and it’s common for cybercriminals to use both types of information together.
If your data has been exposed in a breach, one of the most effective steps you can take is to enroll in credit and identity monitoring services promptly. Santa Rosa Community Health Center advises patients to remain alert for suspicious activity, review financial and insurance statements, and consider placing fraud alerts or security freezes with the nationwide credit bureaus.
Residents of California benefit from additional privacy protections under the California Consumer Privacy Act (CCPA), which grants enhanced rights regarding personal data. Additionally, California residents also benefit from medical privacy protections under the Confidentiality of Medical Information Act (CMIA), which specifically grants enhanced protections for confidential medical data.
If you received a NOTICE OF DATA BREACH letter from Santa Rosa Community Health Center, your personal and/or medical information may be at risk. This type of data can be exploited by identity thieves to commit fraud and other crimes.
Contact the Data Breach Lawyers at Emery | Reddy, PC for a Free Case Review today.