Colorado Department of Health Care Policy and Financing

The Colorado Department of HealthCare Policy & Financing (HCPF) notified individuals of a breach involving its MOVEit Transfer system, used by third-party vendor IBM. Unauthorized access occurred on or about May 28, 2023, and was discovered by HCPF on June 13, 2023. The incident exposed personal information of Health First Colorado and CHP+ members and providers, including government IDs and financial account data. HCPF offered two years of credit monitoring via Experian. The notification was filed with the New Hampshire Attorney General on October 3, 2023.