Two Breaches, One Quarter: Valley Family Health Care’s Challenging Start to 2026

**Executive summary:** On January 12 Valley Family Health Care disclosed that the TriZetto Provider Solutions breach affected 4,300 patients, and later the threat actor "Insomnia" listed VFHC on a dark-web leak site and reportedly dumped a tranche claiming more than one million patient records containing sensitive PHI (including SSNs, dates of birth, Medicaid IDs and email addresses). DataBreaches.net inspected the dump, found numerous unsecured patient charts and confidential incident reports (many without password protection), and notes VFHC has not publicly acknowledged a breach beyond the TPS incident; the exact access method and full scope remain unknown.