Denver Health Medical Plan reports hacking affecting 238,000 individuals
Denver Health Medical Plan, a health plan in colorado, filed a breach report with HHS OCR on 10/01/2026. The incident involved a hacking attack on a network server. The filing indicates that 238,000 individuals were affected. This submission date reflects when the report was sent to the regulator, not when the breach occurred. Health plans must ensure their security controls are robust against such cybersecurity threats. Administrators should review their own vendor contracts and incident response plans to verify alignment with current hipaa requirements for protecting patient data.
Sources differ:
- The HHS record lists a Hacking/IT Incident involving a Network Server; SecurityWeek reports the cause was a vendor (SquareML) access key exposed on a public website, with no evidence of misuse.