The Colorado Department of Health Care Policy & Financing (HCPF) disclosed a data breach that impacted more than 4 million individuals.
Threat actors gained access to the affected person's personal and health information as a consequence of a MOVEit attack on IBM, which caused the incident.
The compromised Information includes full name, Social Security number, Medicaid ID number, Medicare ID number, date of birth, home address and other contact information, demographic or income information, clinical and medical information (such as diagnosis/condition, lab results, medication, or other treatment information), and health insurance information.
HCPF is providing access to credit monitoring services for twenty-four months, through Experian, to impacted individuals along with guidance on how to better protect against identity theft and fraud.
Source: https://securityaffairs.com/149498/data-breach/colorado-hcpf-department-data-breach.html
"id": "COL35711923",
"linkid": "colorado-department-of-health-care-policy-and-financing",
"type": "Breach",
"date": "08/2023",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"