Colorado Department of Health Care Policy and Financing (“HCPF”)/IBM/Progress MOVEit Data Breach Investigation

The Colorado Department of Health Care Policy and Financing (“HCPF”) oversees Health First Colorado (Colorado’s Medicaid program), Child Health Plan Plus (CHP+), and other health care programs for Coloradans who qualify. A vendor of HCPF, IBM, utilized the MOVEit file transfer software produced by Progress Software. On May 28, 2023 a vulnerability was discovered in the MOVEit software exposing 4,091,794 health plan beneficiaries’ personal information including full name, Social Security number, Medicaid ID number, Medicare ID number, date of birth, home address and other contact information, demographic or income information, clinical and medical information (such as diagnosis/condition, lab results, medication, or other treatment information), and health insurance information. On August 11, 2023, HCPF began issuing notices to the impacted individuals. If you receive a notification that your personal information was compromised due to IBM’s use of the Progress Software MOVEit Transfer and you would like additional information about your legal rights, you can contact Goldenberg Schneider, LPA by calling 513-982-1569, sending an email to [email protected] or completing the “Contact Us” form to the right.