Denver Health Medical Plan (United States) notified the US Department of Health and Human Services of a data breach on 1 October 2026. It affected 238,083 patients. Exposed: Health and medical information.
Status
Confirmed breach
People affected
238,083 patients
Reported
1 October 2026
What was exposed
Health and medical information
How it happened
How
Data left open (misconfiguration) The credentials were inadvertently published on June 27, 2025source
Way in
SquareML an active access key associated with SquareML had been found on a publicly accessible websitesource
Look for Denver Health Medical Plan’s own notice or letter: it should say what of yours was involved. Keep it.
Check your health insurer’s statements for treatment you never had.
Expect scams that use your details: calls, texts or emails pretending to be Denver Health Medical Plan, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.
Privacy Unpacked