DENVER – Colorado’s Department of Health Care Policy and Financing is warning that more than 800 people may have had their Health First Colorado health information exposed earlier this year.
The department uses a company called DXC Technology to handle billing for the department, which covers Health First Colorado—the state’s Medicaid program.
After a recent security review of a portal used by Medicaid providers in Colorado for claims, DXC Technology discovered there had been a hyperlink posted to twelve Health First Colorado billing reports containing some information on 822 people.
The information included no financial information, nor did it contain Social Security numbers, dates of birth, or addresses, according to the state. The reports did include:
- Medicaid recipient’s name
- Medicaid ID number
- Name and address of doctor/health care provider
- Patient number (assigned to people at health care provider’s office)
- Procedure code (assigned to the service received)
- Date of service
- Amount Medicaid paid doctor or provider
The state says the web links were accessible between March 1 and May 10, and says all people who have potentially been affected have been or will be notified.
The state says DXC “has no reason to believe this information has been used inappropriately.”
But it is offering a free year of credit protection services to those affected.
Anyone with questions is asked to call Health First Colorado at 844-235-2387 and press option 2, then option 7 to speak with an agent.
