HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedPHIGovernment IDFinancial accountHealth (basic)MediumContained

Colorado Health Network Inc

bd_e976b45e273a745f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 29, 2025

Filed

Jun 22, 2026

To disclose

47 weeks

Affected

3state residents only

Linked

7 filings

Confidence

67%

Full breach record for Colorado Health Network Inc →

Colorado Health Network Inc. identified unauthorized access to its network on July 29, 2025. An unauthorized individual viewed and obtained files containing personal information and protected health information, including SSNs, driver's license numbers, financial account data, and medical records. The incident affected 3 New Hampshire residents. CHN engaged a cybersecurity firm, took systems offline, and notified law enforcement. Notices were sent to affected residents on June 18, 2026, offering complimentary identity monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d47 weeks discovery → filing

Incident timeline

discovery → filing · 47 weeks / 328 days

Jul 29, 2025

Discovered

Jun 22, 2026

Filed

vs. sector median

+35 wks slower

This filing is one of 7 about the same incident.View merged incident

A leak claim by cephalus about this victim predates this filing by 297 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecephalusbd_8a4166887c3f7c7d2025-08-28 · +298dVerified by operator

Regulatory filings (5) · sorted by filing gap

Vermont State AGbd_b783935888d401542026-06-22Verified by operator
Massachusetts State AGbd_fcbfab18aed37eb42026-06-22Verified by operator
Texas State AGbd_c5c99f68257da4862026-06-25 · +3dVerified by operator
HHS OCRbd_8e6a3bfd46ad54482026-06-19 · +3dVerified by operator

Show 1 more filing ↓up to 4d gap

Indiana State AGbd_8bd8723a721ad87d2026-06-18 · +4dVerified by operator

Name: Colorado Health Network Inc
norm: colorado health network
Domain: coloradohealthnetwork.org

Name: Colorado Health Network Inc
norm: colorado health network
Domain: coloradohealthnetwork.org
Industry: Healthcarellm

Discovered: Jul 29, 2025
Materiality determined: —
Notification sent: Jun 18, 2026
Affected individuals: 3state-resident count only
Data types: PHIGovernment IDFinancial accountHealth (basic)
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Implemented incident response protocols
Took certain systems offline
Engaged a cybersecurity firm to assist
Reported the incident to law enforcement
Changes made: Continues to work with IT professionals to further enhance the security of its systems
Will continue to review its network security, including updating policies and procedures as appropriate
Providing notified individuals access to complimentary identity monitoring services
Provided individuals with guidance on how to protect against identity theft and fraud
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 47 weeks(328 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGJun 18 · first

HHS OCR+1d

Vermont State AG+4d

Massachusetts State AG+4d

New Hampshire State AG+4d · this page

Texas State AG+7d

Pattern: first filing Jun 18 (IN), last Jun 25 (TX) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/colorado-health-network-20260622.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 22, 2026
Raw hash: 4b01b17ecb5a03e9df0236e2bf0d225c39cb7f308438d39c8643211ffe8ff526

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityColorado Health Network Inc

Victim entityColorado Health Network Inc

Incidentdiscovered Jul 29, 2025

Stated responseImplemented incident response protocols

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov