A SquareML access key was leaked on a publicly accessible website, potentially exposing the personal and health information of 238,083 Denver Health Medical Plan members.
The vulnerability or weakness
The incident involved an inadvertently leaked access key on a publicly accessible website, which could have been used to access a database containing sensitive information.
Earlier attacks and coverage
- State Bank of India Suffers a Customer PII Data Leak (2026-10-23)
- State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web (2026-10-21)
- 970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach (2026-10-20)
Business impact
This incident could impact the operations and reputation of DHMP and SquareML, requiring extensive remediation efforts and potentially facing legal and financial consequences.
Industries affected
The healthcare industry is primarily affected, as DHMP is a non-profit managed care organization within the Denver Health and Hospital Authority system.
Users affected
238,083 Denver Health Medical Plan members may have had their personal and health information compromised, including names, dates of birth, and health metrics.
