Denver Health Medical Plan
Oct 2026 · Graded Attested · Healthcare and Life Sciences · Beyond the filings
Incident summary
Denver Health Medical PlanOct 2026
Not yet quantified
AAttestedDenver Health Medical Plan's analytics vendor, SquareML, left an access key on a public website from June 27, 2025, until August 18, 2026, exposing a database holding records on 238,083 members. Names, birthdates, admissions, discharges, and health metrics sat behind it; no Social Security or financial data, the notice adds. A single static key was the entire security fence for nearly fourteen months. The account was read-only, a comfort that thins considerably when reading was the whole risk.
Healthcare and Life Sciences
Denver Health Medical Plan Discloses Vendor Breach Affecting 238K Members
Initial attack type exposed or misconfigured system confirmed · Impact data theft inferred
About this record
This incident is beyond the filings: attributed to a company statement, a regulator or court record, or a news report, and graded Attested or Inferred. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.