ENKR

Denver Health Medical Plan vendor access key exposure, possible member data leak

Add to my breach check

Made public

What leaked4

Hard to replace

  • Other profile data

Permanent

  • Health information
  • Date of birth
  • Full name
  • Health informationhealth metrics · BMI, HbA1c, eGFR, provider name, hospital admission, discharge and transfer information
  • Other profile datacity, state and ZIP code; demographic information; health plan eligibility data

To-dos

None of the harms this check covers.

What happened next6 events

  1. Undetected 2 events1 yr 1 mo · show events
  2. Response 4 eventsNotice in 48 days · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record
  1. Dedicated hotline opened: 888-766-0023
  2. By 1 October, letters had been mailed to affected people with details and protective steps
  3. Public statement: data of 238,083 members may have been accessed; no evidence that it was viewed or misused
  4. Exposed access key, public since 27 June 2025, deactivated
  5. The plan was told that an active SquareML access key had been found on a public website
  6. Intrusion began
Company
Denver Health Medical Plan
When it happened
–
Company detected it
Made public
Notice
Possible leak
Affected
238,083 members whose data was in the vendor's database · plan's statement

Sources