Colorado Department of Health Care Policy & Financing

3 breaches4.1M affected in allHealthcarehcpf.colorado.gov

IBM MOVEit breach exposes health data of 4.1 million Colorado Medicaid membersVendor breach exposed names, dates of birth, addresses, Social Security numbers, health records, insurance details and financial details. Reported to the California AG.Vendor breach4.1M affectedGovernmentUSAug 11, 2023 Insider breachInsider exposed names and health records. Reported to the HHS archive.15K affectedInsuranceUSOct 10, 2014 Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.3,589 affectedInsuranceUSAug 16, 2011

About

Every breach here links to its sources and official notices. Across Glyph: lawsuits, incidents and outages.

Added2026-09-25

Colorado Department of Health Care Policy & Financing, 2011-08-16

records2026-09-25

Colorado Department of Health Care Policy & Financing, 2014-10-1015380

disclosed2026-09-25

Colorado Department of Health Care Policy & Financing, 2014-10-102014-10-10

Added2026-09-25

Colorado Department of Health Care Policy & Financing, 2014-10-10

source2026-09-25

Colorado Department of Health Care Policy & Financing, 2023-08-11https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf

campaign2026-09-25

Colorado Department of Health Care Policy & Financing, 2023-08-11moveit-2023

sector2026-09-25

Colorado Department of Health Care Policy & Financing, 2023-08-11government

attack2026-09-25

Colorado Department of Health Care Policy & Financing, 2023-08-11third-party

data_types2026-09-25

Colorado Department of Health Care Policy & Financing, 2023-08-11["names","dob","addresses","ssn","health","insurance","financial"]

records_basis2026-09-25

Colorado Department of Health Care Policy & Financing, 2023-08-11organization

records2026-09-25

Colorado Department of Health Care Policy & Financing, 2023-08-114091794

summary2026-09-25

Colorado Department of Health Care Policy & Financing, 2023-08-11Colorado HCPF said files on the MOVEit application used by its vendor IBM were accessed around May 28, 2023, exposing names, Social Security numbers, Medicaid IDs, income, clinical and insurance data of 4,091,794 Health First Colorado and C

title2026-09-25

Colorado Department of Health Care Policy & Financing, 2023-08-11IBM MOVEit breach exposes health data of 4.1 million Colorado Medicaid members

domain2026-09-25

Colorado Department of Health Care Policy & Financinghcpf.colorado.gov

discovered2026-09-25

Colorado Department of Health Care Policy & Financing, 2023-08-112023-06-13

disclosed2026-09-25

Colorado Department of Health Care Policy & Financing, 2023-08-112023-08-11

disclosed2026-09-25

Colorado Department of Health Care Policy & Financing, 2023-08-112023-10-03

Added2026-09-25

Colorado Department of Health Care Policy & Financing, 2023-08-11

Added2026-09-25

Colorado Department of Health Care Policy & Financing