Breaking News
More () »

Colorado health care agency reports data breach

The Department of Health Care Policy and Financing said the cybersecurity incident occurred in May.
Credit: Getty Images/iStockphoto
Man's hand holding Social Security card. Computer theft on laptop.

DENVER — The department that oversees Colorado's Medicaid program announced a data breach to an application used by a third-party vendor which exposed some peoples' personal information. The Department of Health Care Policy and Financing (HCPF) also oversees the Child Health Plan Plus (CHP+) program and other health care programs for residents who qualify for coverage.

The department said they were notified of a possible problem on May 31. Progress Software reported to the department they found a problem that affected its MOVEit Transfer app. IBM, the third-party vendor, uses MOVEit to move HCPF data files in the normal course of business, HCPF said. 

After an investigation was launched, HCPF said they found that some Health First Colorado and CHP+ users' health information was accessed by an "unauthorized actor" on or about May 28. 

Some of the information obtained may have included:

  • Full name
  • Social Security number
  • Medicaid and Medicare ID numbers
  • Date of birth
  • Home address and other contact information
  • Demographic or income information
  • Clinical and medical information such as diagnosis and condition, lab results, medications and treatment information
  • Health insurance information

As a result of the breach, HCPF and its vendors are reviewing their policies, procedures and cybersecurity safeguards, the department said. 

People who have not yet been notified but think they may have been affected can call HCPF at 833-346-1583 from 7 a.m.-9 p.m. Monday through Friday, and from 9 a.m.-6 p.m. on weekends. Callers need to provide engagement number B100639.

HCPF said it is offering potentially impacted users two years of free credit monitoring and identity restoration services through Experian.

HCPF said none of their systems nor state of Colorado systems were affected by the breach.



Subscribe to our daily 9NEWSLETTER for top stories from 9NEWS curated daily just for you. Get content and information right now for can’t-miss stories, Next and Broncos content, weather and more delivered right to your inbox.   

iTunes: http://on9news.tv/itunes
Google Play: http://on9news.tv/1lWnC5n  


ROKU: add the channel from the ROKU store or by searching for KUSA. 

For both Apple TV and Fire TV, search for "9NEWS" to find the free app to add to your account. Another option for Fire TV is to have the app delivered directly to your Fire TV through Amazon. 

Before You Leave, Check This Out