CO · HHS OCR reports
HIPAA breaches in Colorado
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Colorado.
Reports
142
Individuals affected
29,384,025
Under investigation
18
Top type: Hacking/IT Incident
State breach notification law
Colo. Rev. Stat. § 6-1-716 (Colorado Consumer Protection Act - Notification of Security Breach) (amended 2018)
Timing: 30 days Colorado requires businesses/covered entities to notify affected individuals in the most expedient
Read the Colorado data breach notification law summaryAll reports, newest first
Page 1 of 3. 142 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Mountain Rheumatology Professional, LLC | Healthcare Provider | 5,378 | Aug 14, 2026 | Hacking/IT Incident | Under investigation |
| Virta Health | Business Associate | 602 | Jun 30, 2026 | Hacking/IT Incident | Under investigation |
| NAS Recovery Solutions | Healthcare Provider | 7,000 | Jun 22, 2026 | Unauthorized Access/Disclosure | Archive (closed) |
| Colorado Health Network Inc. | Healthcare Provider | 68,212 | Jun 19, 2026 | Hacking/IT Incident | Under investigation |
| All About Women's Care | Healthcare Provider | 12,000 | Jun 3, 2026 | Hacking/IT Incident | Under investigation |
| Virta Medical PC | Healthcare Provider | 14,636 | May 23, 2026 | Hacking/IT Incident | Under investigation |
| Western Orthopaedics, P.C. | Healthcare Provider | 113,330 | May 1, 2026 | Hacking/IT Incident | Under investigation |
| Capitol Pain Institute | Healthcare Provider | 695 | May 1, 2026 | Hacking/IT Incident | Under investigation |
| Colorado Allergy & Asthma Centers, P.C. | Healthcare Provider | 2,063 | Mar 6, 2026 | Hacking/IT Incident | Archive (closed) |
| Kin Counseling Services PLLC | Healthcare Provider | 500 | Mar 2, 2026 | Hacking/IT Incident | Under investigation |
| Cedar Point Health, LLC | Healthcare Provider | 23,114 | Feb 12, 2026 | Hacking/IT Incident | Under investigation |
| Clinic Service Corporation | Business Associate | 82,331 | Jan 28, 2026 | Hacking/IT Incident | Under investigation |
| Capitol Premier Dental Group | Healthcare Provider | 1,559 | Nov 18, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Partners in Pediatrics, P.C. | Healthcare Provider | 13,300 | Oct 8, 2025 | Hacking/IT Incident | Under investigation |
| DaVita Inc. | Healthcare Provider | 2,689,826 | Aug 1, 2025 | Hacking/IT Incident | Under investigation |
| Vail Summit Orthopaedics | Healthcare Provider | 5,044 | Jul 31, 2025 | Hacking/IT Incident | Under investigation |
| The Center at Cordera | Healthcare Provider | 6,057 | Jul 29, 2025 | Hacking/IT Incident | Archive (closed) |
| Clinica Family Health Services | Healthcare Provider | 47,593 | Jul 14, 2025 | Hacking/IT Incident | Under investigation |
| PET Imaging of Northern Colorado | Healthcare Provider | 4,824 | Jun 27, 2025 | Hacking/IT Incident | Archive (closed) |
| InSider Vision, LLC | Healthcare Provider | 1,426 | May 13, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Rocky Mountain Regional VA Medical Center | Healthcare Provider | 1,115 | Mar 10, 2025 | Unauthorized Access/Disclosure | Archive (closed) |
| Alpine Ears, Nose & Throat, P.L.L.C. | Healthcare Provider | 65,648 | Jan 17, 2025 | Unauthorized Access/Disclosure | Under investigation |
| Conceptions Reproductive Associates of Colorado | Healthcare Provider | 80,000 | Nov 25, 2024 | Hacking/IT Incident | Under investigation |
| Rocky Mountain Gastroenterology Associates PLLC | Healthcare Provider | 366,491 | Nov 13, 2024 | Hacking/IT Incident | Under investigation |
| Southwest Colorado Mental Health Center, Inc. d/b/a Axis Health System | Healthcare Provider | 23,385 | Oct 25, 2024 | Hacking/IT Incident | Archive (closed) |
| Summit Pathology and Summit Pathology Laboratories, Inc. | Healthcare Provider | 1,813,538 | Oct 18, 2024 | Hacking/IT Incident | Under investigation |
| Delta County Memorial Hospital District (Delta Health) | Healthcare Provider | 148,363 | Jul 29, 2024 | Hacking/IT Incident | Archive (closed) |
| DaVita Inc. | Healthcare Provider | 67,443 | Jul 3, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Panorama Eyecare | Healthcare Provider | 377,911 | Jun 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Gaia Software, LLC | Business Associate | 56,676 | Apr 5, 2024 | Hacking/IT Incident | Archive (closed) |
| Northern Colorado Long Term Acute Hospital | Healthcare Provider | 4,335 | Mar 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Northern Colorado Rehabilitation Hospital | Healthcare Provider | 885 | Mar 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Denver Regional Rehabilitation Hospital | Healthcare Provider | 848 | Mar 29, 2024 | Hacking/IT Incident | Archive (closed) |
| Lakewood Medical Center, PC | Healthcare Provider | 2,500 | Mar 21, 2024 | Hacking/IT Incident | Archive (closed) |
| Vail Summit Orthopaedics, LLC (“VSON”) | Healthcare Provider | 1,138 | Mar 4, 2024 | Hacking/IT Incident | Archive (closed) |
| Dignity Health Welfare Benefits Plan | Health Plan | 744 | Feb 15, 2024 | Unauthorized Access/Disclosure | Archive (closed) |
| Colorado Ophthalmology Associates, PC | Healthcare Provider | 6,020 | Jan 13, 2024 | Hacking/IT Incident | Archive (closed) |
| Mountain Dermatology Specialists, PC | Healthcare Provider | 2,705 | Dec 22, 2023 | Hacking/IT Incident | Archive (closed) |
| Welltok, Inc. | Business Associate | 14,782,887 | Nov 6, 2023 | Hacking/IT Incident | Archive (closed) |
| PeakMed | Healthcare Provider | 27,800 | Oct 27, 2023 | Hacking/IT Incident | Archive (closed) |
| LCS Financial Services | Business Associate | 768 | Oct 24, 2023 | Hacking/IT Incident | Archive (closed) |
| TTEC Healthcare Solutions | Business Associate | 2,953 | Aug 30, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| Colorado Department of Health Care Policy & Financing | Health Plan | 4,091,794 | Aug 11, 2023 | Hacking/IT Incident | Archive (closed) |
| Denver Public Schools Medical Plans | Health Plan | 35,068 | Mar 3, 2023 | Hacking/IT Incident | Archive (closed) |
| Southeast Colorado Hospital District | Healthcare Provider | 1,435 | Feb 3, 2023 | Hacking/IT Incident | Archive (closed) |
| University of Colorado Hospital Authority | Healthcare Provider | 49,881 | Jan 17, 2023 | Hacking/IT Incident | Archive (closed) |
| Salud Family Health | Healthcare Provider | 427,546 | Oct 5, 2022 | Hacking/IT Incident | Archive (closed) |
| DaVita Inc. | Healthcare Provider | 1,092 | Sep 6, 2022 | Hacking/IT Incident | Archive (closed) |
| First Street Family Health | Healthcare Provider | 7,310 | Aug 26, 2022 | Hacking/IT Incident | Archive (closed) |
| Prowers County Hospital District | Healthcare Provider | 1,205 | Aug 22, 2022 | Hacking/IT Incident | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.