Security1 hOctober 27, 2026, 20:30

Vendor key leak exposes data of 238,000 Denver Health plan members

Denver Health Medical Plan is notifying 238,083 people that their personal and health data may have been exposed through vendor SquareML. An access key was published on a public website on June 27, 2025, and revoked only on August 18, 2026; the account was read-only.

SecurityWeek

Open source

Vendor key leak exposes data of 238,000 Denver Health plan members

Breach affects 238,083 DHMP members
Access key was exposed from June 27, 2025 to August 18, 2026
Account was read-only; no SSNs or financial data stored
DHMP and SquareML reset passwords and pursue remediation

#SquareML#DenverHealth

Waymo drives into Denver farmers market, leaving vendors puzzled

Security

Arrest of a Prominent Ransomware Negotiator Exposes Vendor Oversight Gaps

Security

DC Health Agency Data Breach Exposes 400,000 Beneficiary Records

Security

Vendor key leak exposes data of 238,000 Denver Health plan members

Waymo drives into Denver farmers market, leaving vendors puzzled

Arrest of a Prominent Ransomware Negotiator Exposes Vendor Oversight Gaps

DC Health Agency Data Breach Exposes 400,000 Beneficiary Records

LiteLLM supply chain attack traced to exposed master key