Loading...
25 healthcare data breaches have been reported in Colorado, affecting 20,617,036 patients. Review breach details, understand your rights, and learn how to protect your medical information.
If your provider is listed here, you should have received a breach notification letter under HIPAA. Monitor your Explanation of Benefits statements for unauthorized claims, place a fraud alert on your credit, and consider requesting a copy of your medical records to verify accuracy. You can file a complaint with HHS if you did not receive required notification.
| Organization | Date | Type | Affected | Severity |
|---|---|---|---|---|
| Welltok, Inc. | 2023-11-06 | Hacking/IT Incident | 8,493,379 | critical |
| Colorado Department of Health Care Policy & Financing | 2023-08-11 | Hacking/IT Incident | 4,091,794 | critical |
| DaVita Inc. | 2025-08-01 | Hacking/IT Incident | 2,689,826 | critical |
| Professional Finance Company, Inc. | 2022-07-01 | Hacking/IT Incident | 1,918,941 | critical |
| Summit Pathology and Summit Pathology Laboratories, Inc. | 2024-10-18 | Hacking/IT Incident | 1,813,538 | critical |
Hacking/IT Incident · 82,331 affected
Hacking/IT Incident · 2,689,826 affected
Hacking/IT Incident · 5,044 affected
Hacking/IT Incident · 6,057 affected
Hacking/IT Incident · 4,824 affected
Hacking/IT Incident · 80,000 affected
Hacking/IT Incident · 366,491 affected
Hacking/IT Incident · 1,813,538 affected
Hacking/IT Incident · 148,363 affected
Unauthorized Access/Disclosure · 67,443 affected
Under HIPAA, healthcare organizations in Colorado must notify you within 60 days if your protected health information (PHI) has been compromised in a data breach affecting 500 or more individuals.
Colorado has state-level breach notification laws that may provide additional protections beyond federal HIPAA requirements. You have the right to:
Colorado Medical Records Guide
Know your rights to access and correct your records
Request Your Medical Records
Order copies to verify accuracy after a breach
Search our database to see if your healthcare provider in Colorado was involved in a breach.
As of our latest data, 25 healthcare data breaches have been reported in Colorado, affecting a total of 20,617,036 patients. The most common type is Hacking/IT Incident.
If your healthcare data was compromised in Colorado, you should: (1) review the breach notification letter for details, (2) request a copy of your medical records to check for unauthorized changes, (3) place a fraud alert on your credit reports, (4) file a complaint with the HHS Office for Civil Rights or the Colorado Attorney General's office, and (5) consider consulting an attorney about potential compensation.
Yes, Colorado has state-level breach notification laws that may provide additional protections beyond federal HIPAA requirements. These laws may cover different types of personal information, have different notification timelines, and provide additional enforcement mechanisms through the Colorado Attorney General's office.
Disclaimer: This page provides educational information about healthcare data breaches in Colorado. It is not legal advice. Data is sourced from the HHS OCR Breach Portal and may not reflect the most current information. Consult a qualified attorney for specific legal questions about a data breach affecting you.