Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
Denver Health Medical Plan (DHMP) is notifying 238,000 people that their personal and health information may have been compromised in a data breach.
Based in Denver, Colorado, DHMP is a non-profit managed care organization within the Denver Health and Hospital Authority system. Through its Denver Health Medicaid Choice plan, it administers Health First Colorado (Medicaid) benefits for members in Denver and three surrounding counties.
The data breach, DHMP says, involved third-party vendor SquareML, which provides a no-code platform for healthcare analytics.
According to DHMP’s incident notice (PDF), SquareML notified the health plan administrator on August 14, 2026, that an access key was inadvertently leaked on a publicly accessible website.
“These credentials may have been used to access a database maintained by SquareML containing information about DHMP’s 238,083 members,” DHMP says.
The access key was published online on June 27, 2025, and was revoked on August 18, 2026. During this window,...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
