Colorado HCPF (Medicaid) · October 17, 2026 · Primary source
Notice of Data Security Incident
Read the full document at Colorado HCPF (Medicaid).
What this may mean
The incident affects Medicaid enrollees' PHI held by a state Medicaid agency, implicating HIPAA breach notification obligations and state data security requirements for HCPF and any downstream business associates. The compromised data fields include identifiers and partial Social Security numbers for an as-yet-undetermined number of Health First Colorado enrollees, with individual mailed notifications to follow the completed investigation.
Informational only. Not legal, medical, financial, or other professional advice. Always consult a qualified professional familiar with your specific facts before relying on any item.
Related items
- OCR HIPAA Breach Portal · September 16, 2026OCR HIPAA Breach: Beaver County Behavioral Health, PA, 501 affected, Hacking/IT IncidentScore 95
- OCR HIPAA Breach Portal · October 1, 2026OCR HIPAA Breach: Leggett & Platt, Incorporated Employee Benefit Plan, MO, 61,702 affected, Hacking/IT IncidentScore 89
- Vermont Attorney General · September 29, 2026Attorney General Clark Announces Multistate Settlement with Labcorp Over the American Medical Collection Agency Data BreachScore 89
- Connecticut Attorney General · September 25, 2026Attorney General Tong Leads $2.3 Million Multistate Settlement with LabCorp Over the American Medical Collection Agency Data BreachScore 89
- Pennsylvania Attorney General · September 24, 2026Press Release SEP 24, 2026 Attorney General Sunday Announces Multistate Settlement with Labcorp over American Medical Collection Agency Data Breach HARRISBURG, Attorney General Dave Sunday announced that Pennsylvania, as part of a coalition of 44 attorneys general, has settled with the Laboratory Corporation of America (Labcorp) resolving… Read moreScore 89
- North Dakota HHS Medicaid · August 25, 2026MEDIA NOTICE: Security Notice of Unauthorized Access to PHIScore 89