securityweek.comarticleVendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
Denver Health Medical Plan is notifying 238,083 members that vendor SquareML leaked an access key on a public website. The key was online from 27 June 2025 until it was revoked on 18 August 2026 and gave read-only access to a database of names, dates of birth, health metrics, eligibility and admission data. DHMP found no evidence of misuse and reset passwords for all accounts with access.
TL;DR A leaked SquareML access key exposed a read-only database holding health data on 238,083 Denver Health Medical Plan members.
Organisations named here
- Denver Health Medical Plan
- Health First Colorado
- leaked access key
- SquareML
- third-party vendor breach
Technologies named here
- SquareML no-code healthcare analytics platform
Related in Threat Intel
huntress.comwriteupReverse Engineering the Six Stages of MacSync Stealer and RAT
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
blog.talosintelligence.comtoolIntroducing CAIRN: Frontier tracking for AI-integrated malware (Cisco Talos)
huntress.comwriteup