Colorado Health Network Data Breach

The official regulatory report lists July 29, 2025, as the breach date. Colorado Health Network said it secured its systems and began an investigation with a cybersecurity firm after discovering the incident. The investigation found that an unauthorized person viewed and obtained certain network files; the method of initial access was not disclosed. Notifications began on June 18, 2026.

The information varied by person. The disclosed scope includes names, Social Security numbers, driver's license or state identification information, passport numbers, financial-account information, and debit or credit card information. Diagnoses and diagnosis codes, health conditions, prescriptions, health care provider details, Medicare or Medicaid identifiers, and other health-insurance information may also have been present.

The organization secured its systems, investigated with an external cybersecurity firm, and notified affected people. Notice recipients were offered 24 months of complimentary identity and credit monitoring. At the time of the notice, the organization said it had received no reports or evidence of fraud or identity theft resulting from the incident.

Notice recipients should regularly review bank and payment-card accounts, credit reports, and health-insurance statements for activity they do not recognize. People whose Social Security numbers or financial information were involved may consider a fraud alert or credit freeze based on their circumstances and should report suspicious activity to the relevant institution.