Posted On August 16, 2023 Consumer Privacy & Data Breaches
August 16 – The Colorado Department of Health Care Policy and Financing (“Colorado HCPF,” “CHCPF”) data breach lawyers at Console & Associates, P.C are investigating the data breach that was reported after the company was affected by a recent third party cyber security attack involving the MOVEit software. The Colorado Department of Health Care Policy and Financing data breach resulted in the names, Social Security numbers, dates of birth, addresses, health information, and demographic information of certain individuals being compromised. It is believed to have impacted as many as 4,000,000 individuals.
According to the Attorney General of Maine, Colorado Department of Health Care Policy and Financing reported a data breach after they were affected by a recent third party cyber security attack involving the MOVEit software. CHCPF relies on third-party vendors to perform certain services and one of these vendors uses the MOVEit program to securely transfer files.
However, on May 31, 2023, Progress Software, the developer of MOVEit, announced a critical, zero-day vulnerability within MOVEit. CHCPF launched an investigation to determine whether Health First Colorado or CHP+ members’ protected health information was accessed by an unauthorized party. On June 13, 2023, it was confirmed that an unauthorized party was able to access member information through the vendor’s compromised MOVEit on May 28, 2023. No CHCPF systems were impacted. On August 11, 2023, Colorado Department of Health Care Policy and Financing sent out data breach letters to those individuals whose information was affected by the breach.
To learn more about the Colorado Department of Health Care Policy and Financing data breach, see our latest piece on the topic.
The Colorado Department of Health Care Policy and Financing (HCPF) is the state-level government entity that oversees Health First Colorado (Colorado’s Medicaid program), Child Health Plan Plus (CHP+), and other healthcare programs for Coloradans who qualify.
Our data breach lawyers are eager to speak to victims of the Colorado Department of Health Care Policy and Financing data breach to determine what damages they sustained and what compensation may be available to them. If you recently received a NOTICE OF DATA BREACH from Colorado Department of Health Care Policy and Financing and would like a free consultation, contact the Console & Associates, P.C. law firm at (866) 778-5500 to discuss your legal options, or submit a confidential contact form.
