● Covered by 1 source · 1 reportMedium impact1 negative
Denver Health Plan Notifies 238,000 Members of Data Breach via Vendor Key Leak
Key points
- 238,000 DHMP members' data potentially exposed.
- Third-party vendor SquareML leaked an access key.
- Key was public from June 2025 to August 2026.
- No Social Security numbers or financial data were exposed.
Data Breach Notification Issued
Denver Health Medical Plan (DHMP) has begun notifying 238,000 individuals about a potential data compromise. The incident involved an inadvertent leak of an access key by SquareML, a third-party vendor providing healthcare analytics services to DHMP. This key could have granted access to a database containing member information.
Vendor Key Exposure Timeline
SquareML informed DHMP on August 14, 2026, that an access key was publicly exposed on a website. The key was accessible from June 27, 2025, until its revocation on August 18, 2026. During this period, the key could have been used to access the database maintained by SquareML, which contained DHMP member data.
Compromised Information Details
The potentially compromised information includes names, dates of birth, ZIP codes, city, state, demographic information, health metrics, health plan eligibility data, hospital admission, provider name, and discharge and transfer data. DHMP stated that the database did not store Social Security numbers or financial information. The compromised account was read-only, meaning data could not be downloaded, exported, deleted, or changed.
No Evidence of Misuse
DHMP has reported no evidence that member information was actually viewed or misused, only that it was accessible. The organization emphasizes that the risk is potential rather than confirmed exploitation of data.
Remedial Actions Taken
In response to the incident, all passwords for accounts with database access have been reset. DHMP and SquareML are implementing additional remedial actions to prevent future occurrences and secure member data.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
Denver Health Medical Plan (DHMP) is notifying 238,000 members that their personal and health information may have been compromised due to an access key leak by third-party vendor SquareML. The leaked key, exposed for over a year, could have allowed access to a database containing names, dates of birth, health metrics, and plan eligibility data, though no evidence of misuse has been found.