Zero Radar
← feed
HighData breachupdated 27 Oct 2026, 13:33 UTC

Leaked vendor key put Denver health plan member data at risk

A password-like key belonging to a third-party vendor was exposed, which could have let someone reach a database holding health and personal details of about 238,000 people. The material does not say whether anyone actually used it.

1 source, unconfirmed
SeverityHighData breach
Being exploited?UnclearNo reports either way yet
What to doCheck exposureWatch for official notices from Denver Health and stay alert to phishing that references your health plan.
How sure is this?1 source, unconfirmedOnly one publisher so far, details may change

How the attack works simplified

  1. 1Vendor key leakedSquareML access key exposed
  2. 2Database reachableKey could grant database access
  3. 3Health data at riskPersonal and health information involved
  4. 4Potential misuseUnauthorized access not confirmed
  5. ResultHealth data of 238,000 members at risk

What happened

A leaked SquareML access key could have granted access to a database containing personal and health information for Denver Health plan members.

Why it is dangerous: Around 238,000 Denver Health plan members had their personal and health information potentially exposed, which could enable identity theft, fraud or privacy harm.

Are you affected?

You are affected if you are a Denver Health plan member whose data was stored in the database accessible through the leaked SquareML key.

Denver Health plan members (about 238,000 people); database accessed via SquareML access key

What to do

  1. Watch for notices from Denver Health or your health plan about your data and follow their guidance
  2. Be alert to phishing or suspicious calls or emails referencing your health plan or personal details
  3. Monitor your accounts and statements for unfamiliar activity and consider a credit freeze if sensitive identifiers were exposed

Timeline

  1. 27 Oct 2026, 13:30 UTC
    Publicly disclosed
  2. 27 Oct 2026, 13:30 UTC
    Reported by SecurityWeek · SecurityWeek
  3. 27 Oct 2026, 13:33 UTC
    Picked up by Zero Radar

Sources 1 report, oldest first

Security press established security newsrooms

Technical details

ID
ZR-41ce8592
Disclosed
27 Oct 2026, 13:30 UTC
On Zero Radar
27 Oct 2026, 13:33 UTC (3 min after disclosure)
Last change
27 Oct 2026, 13:33 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Leaked vendor key put Denver health plan member data at risk · Zero Radar