DENVER – Colorado’s Department of Health Care Policy and Financing is warning that more than 800 people may have had their Health First Colorado health information exposed earlier this year.
The department uses a company called DXC Technology to handle billing for the department, which covers Health First Colorado—the state’s Medicaid program.
After a recent security review of a portal used by Medicaid providers in Colorado for claims, DXC Technology discovered there had been a hyperlink posted to twelve Health First Colorado billing reports containing some information on 822 people.
The information included no financial information, nor did it contain Social Security numbers, dates of birth, or addresses, according to the state. The reports did include:
Medicaid recipient’s name
Medicaid ID number
Name and address of doctor/health care provider
Patient number (assigned to people at health care provider’s office)
Procedure code (assigned to the service received)
Date of service
Amount Medicaid paid doctor or provider
The state says the web links were accessible between March 1 and May 10, and says all people who have potentially been affected have been or will be notified.
The state says DXC “has no reason to believe this information has been used inappropriately.”
But it is offering a free year of credit protection services to those affected.
Anyone with questions is asked to call Health First Colorado at 844-235-2387 and press option 2, then option 7 to speak with an agent.