Skip to content

Colorado Health Network

Disclosed Jun 18, 20263 months ago68,212 affectedConfirmed

Official notice

What is known

People affected68,212 (as reported to HHS)
DisclosedJun 18, 2026
DiscoveredApr 28, 2026
HappenedJul 26, 2025
AttackHacking
Data exposedNames, Health, Social Security numbers, Government IDs, Insurance, Payment cards, Financial, Dates of birth, Addresses, Biometrics
SectorHealthcare · US
StatusConfirmed

Sources

Source
HHS OCR breach report: Colorado Health Network (Healthcare Provider, CO)ocrportal.hhs.gov · Official notice
Texas Attorney General data security breach report BR-0005130: Colorado Health Networkoag.my.site.com · Official notice
Vermont Attorney General breach report: Colorado Health Networkago.vermont.gov · Official notice
Indiana Attorney General 2026 data breach report: Colorado Health Networkin.gov · Official notice

Notices filed

WhereFiledPeople
Indiana AGresidents of INJun 1835
HHS OCRtotalJun 1968,212
Vermont AGresidents of VTJun 224
Texas AGresidents of TXJun 25257
History of this record
  • 2026-09-25 · disclosed: 2026-06-19 to 2026-06-18 · backfill source
  • 2026-09-25 · source: empty to https://ago.vermont.gov/categories/security-breach-notices · backfill source
  • 2026-09-25 · data_types: ["names","health","ssn","government-id","insurance","payment-card","financial","dob","addresses"] to ["names","health","ssn","government-id","insurance","payment-card","financial","dob","addresses","biometrics"] · backfill source
  • 2026-09-25 · data_types: ["names","health"] to ["names","health","ssn","government-id","insurance","payment-card","financial","dob","addresses"] · backfill source
  • 2026-09-25 · discovered: empty to 2026-04-28 · backfill source
  • 2026-09-25 · occurred: empty to 2025-07-26 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (HHS OCR), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about Colorado Health Network

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.