Colorado Department of Health Care Policy and Financing

The Colorado Department of Health Care Policy & Financing (HCPF) notified individuals that their personal and protected health information may have been accessed by an unauthorized actor via a third-party vendor, IBM, which used the MOVEit Transfer application. The breach occurred on May 28, 2023, and was discovered on June 13, 2023. Affected data includes names, SSNs, Medicaid/Medicare IDs, dates of birth, addresses, and clinical information. HCPF is offering two years of credit monitoring.