Children's Hospital Colorado
ent_019e0bd52cd1ec77c202eee262e28796
Disclosures
2
HHS OCR · 1 jurisdiction
Incidents
—
no linked incident in sample
Max affected reported
3,370
as filed · HHS OCR CO
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Children's Hospital Colorado
- Normalized
- children s hospital colorado— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300T4XJYM3J9UZI27
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- childrenscolorado.org
Disclosure history (2)newest first
- COHHS OCRas victim2020-07-27
Children's Hospital Colorado reported to HHS OCR on 2020-07-27 a Hacking/IT Incident affecting 2,553 individuals, with breached information located in Email accounts. OCR investigated two related phishing incidents (2017 and 2020): one compromising an email account (3,370 individuals' PHI) due to disabled MFA, and another where workforce members granted unknown third parties access to three email accounts (10,840 individuals' PHI). OCR found HIPAA Privacy and Security Rule violations. A civil money penalty of $548,265 was imposed in 2024.
- COHHS OCRas victim2017-09-08
Children's Hospital Colorado reported to HHS OCR on 2017-09-08 a Hacking/IT Incident (email phishing) affecting 3,370 individuals' PHI stored in email accounts. OCR investigation found MFA was disabled on a compromised account. OCR imposed a $548,265 civil money penalty. Breached info located in Email. No business associate was involved. The entity is a pediatric hospital, so minor patient records are implicated.