US-CO — Hacking/IT Incident
Reported with a business associate involved (HHS portal)
Timeline
- June 27, 2025Press coverage Press
press report (press_reported): The key had inadvertently been added to a public website by the vendor on June 27, 2025
source - August 14, 2026Press coverage Press
press report (acknowledged): On August 14, 2026, Denver Health Medical Plan was notified that an access key used by the vendor was found on a public website.
source - August 18, 2026Press coverage Press
press report (press_reported): The access key was deactivated on August 18, 2026.
source - October 1, 2026Reported to regulator Regulator
HHS OCR breach portal listing: Hacking/IT Incident; Network Server
source - October 26, 2026Press coverage Press
press report (individuals_notified): Denver Health Medical Plan has notified more than 238,000 individuals about a vendor-related data incident.
source