Denver Health Medical Plan Data Breach Class Action Investigation

Health information belonging to 238,083 members of Denver Health Medical Plan was left exposed for more than a year after a vendor posted a database access key on a public website. If you received a data breach notification letter from Denver Health Medical Plan, our data breach lawyers want to hear from you.

What Happened?

According to a report published by HIPAA Journal, a data breach at Denver Health Medical Plan was traced to its analytics vendor, SquareML. The breach began on June 27, 2025, when a read-only access key to a vendor database was posted on a public website. Information exposed in the breach reportedly included names, dates of birth, health plan eligibility information, admission and discharge information, and health metrics. Affected individuals were notified by mail. The key was not deactivated until August 18, 2026.

If you are a current or former member of Denver Health Medical Plan, you may be entitled to compensation. Fill out the form below to see if you qualify.

Steps To Take If You Were Affected

1. Monitor your credit reports and financial accounts for suspicious activity
2. Consider placing a fraud alert or credit freeze with all three major credit bureaus
3. Be alert to phishing emails or calls referencing the breach
4. Change passwords on any affected accounts and enable two-factor authentication
5. Keep a copy of your data breach notification letter for your records