CO · HHS OCR reports
HIPAA breaches in Colorado
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Colorado.
Reports
142
Individuals affected
29,384,025
Under investigation
18
Top type: Hacking/IT Incident
State breach notification law
Colo. Rev. Stat. § 6-1-716 (Colorado Consumer Protection Act - Notification of Security Breach) (amended 2018)
Timing: 30 days Colorado requires businesses/covered entities to notify affected individuals in the most expedient
Read the Colorado data breach notification law summaryAll reports, newest first
Page 2 of 3. 142 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Professional Finance Company, Inc. | Business Associate | 1,918,941 | Jul 1, 2022 | Hacking/IT Incident | Archive (closed) |
| Cherry Creek Eye Physicians and Surgeons, P.C. | Healthcare Provider | 17,732 | Jun 14, 2022 | Hacking/IT Incident | Archive (closed) |
| Vail Health Services | Healthcare Provider | 41,889 | May 4, 2022 | Hacking/IT Incident | Archive (closed) |
| Sterling Healthcare Holdings, LLC DBA Cordant Health Solutions | Healthcare Provider | 20,932 | Apr 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Colorado Physician Partners, PLLC | Healthcare Provider | 12,877 | Mar 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Valley View Hospital Association | Healthcare Provider | 21,826 | Mar 19, 2022 | Hacking/IT Incident | Archive (closed) |
| South Denver Cardiology Associates, PC | Healthcare Provider | 287,652 | Mar 4, 2022 | Hacking/IT Incident | Archive (closed) |
| Montrose Regional Health | Healthcare Provider | 52,632 | Feb 25, 2022 | Hacking/IT Incident | Archive (closed) |
| Colorado Department of Human Services | Healthcare Provider | 6,132 | Jan 19, 2022 | Hacking/IT Incident | Archive (closed) |
| TTEC Healthcare Solutions | Business Associate | 86,305 | Jan 7, 2022 | Hacking/IT Incident | Archive (closed) |
| James Kagan, MD | Healthcare Provider | 1,310 | Dec 22, 2021 | Hacking/IT Incident | Archive (closed) |
| Boulder Neurosurgical and Spine Associates | Healthcare Provider | 21,450 | Nov 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Colorado Allergy and Asthma Centers, PC | Healthcare Provider | 791 | Nov 19, 2021 | Hacking/IT Incident | Archive (closed) |
| The Urology Center of Colorado | Healthcare Provider | 137,820 | Nov 5, 2021 | Hacking/IT Incident | Archive (closed) |
| Centura Health | Healthcare Provider | 738 | Jun 12, 2021 | Hacking/IT Incident | Archive (closed) |
| Peak Vista Community Health Centers | Healthcare Provider | 3,118 | Apr 26, 2021 | Theft | Archive (closed) |
| Colorado Retina Associates, P.C. | Healthcare Provider | 26,609 | Mar 12, 2021 | Hacking/IT Incident | Archive (closed) |
| Pitkin County | Healthcare Provider | 1,454 | Feb 9, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Cedar Springs Hospital | Healthcare Provider | 2,283 | Dec 9, 2020 | Loss | Archive (closed) |
| AspenPointe, Inc. | Healthcare Provider | 295,617 | Nov 19, 2020 | Hacking/IT Incident | Archive (closed) |
| Accents on Health | Healthcare Provider | 2,000 | Sep 16, 2020 | Hacking/IT Incident | Archive (closed) |
| SCL Health - Colorado | Healthcare Provider | 343,493 | Sep 10, 2020 | Hacking/IT Incident | Archive (closed) |
| SCL Health - Montana | Healthcare Provider | 93,642 | Sep 10, 2020 | Hacking/IT Incident | Archive (closed) |
| SCL Health - Kansas | Healthcare Provider | 3,845 | Sep 10, 2020 | Hacking/IT Incident | Archive (closed) |
| Mental Health Center of Boulder County Inc. dba Mental Health Partners | Healthcare Provider | 2,650 | Sep 9, 2020 | Hacking/IT Incident | Archive (closed) |
| City of Lafayette | Healthcare Provider | 9,149 | Aug 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Children's Hospital Colorado | Healthcare Provider | 2,553 | Jul 27, 2020 | Hacking/IT Incident | Archive (closed) |
| Rangely District Hospital | Healthcare Provider | 6,339 | Jun 8, 2020 | Hacking/IT Incident | Archive (closed) |
| Colorado Department of Human Services, Office of Behavioral Health | Healthcare Provider | 8,132 | Apr 7, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Elk Ridge Dentistry | Healthcare Provider | 2,793 | Mar 2, 2020 | Theft | Archive (closed) |
| Vail Clinic, Inc. dba Vail Health Hospital | Healthcare Provider | 710 | Feb 27, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Jefferson Center for Mental Health | Healthcare Provider | 1,319 | Jan 30, 2020 | Theft | Archive (closed) |
| Colorado Department of Human Services | Healthcare Provider | 12,230 | Dec 16, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Sunrise Community Health | Healthcare Provider | 18,404 | Dec 5, 2019 | Hacking/IT Incident | Archive (closed) |
| Elizabeth Family Health | Healthcare Provider | 28,375 | Nov 22, 2019 | Theft | Archive (closed) |
| Perfect Teeth Yale, P.C. | Healthcare Provider | 15,000 | Sep 19, 2019 | Loss | Archive (closed) |
| Rocky Mountain Health Maintenance Organization, Inc. | Health Plan | 1,835 | Sep 12, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Colorado Eye Center | Healthcare Provider | 4,478 | Jul 15, 2019 | Hacking/IT Incident | Archive (closed) |
| Centura Health | Healthcare Provider | 7,515 | May 22, 2019 | Hacking/IT Incident | Archive (closed) |
| Rocky Mountain Health Care Services | Healthcare Provider | 971 | Feb 11, 2019 | Hacking/IT Incident | Archive (closed) |
| Critical Care, Pulmonary and Sleep Associates, PLLP | Healthcare Provider | 23,377 | Jan 21, 2019 | Hacking/IT Incident | Archive (closed) |
| Personal Assistance Services of Colorado, LLC | Healthcare Provider | 1,839 | Sep 20, 2018 | Hacking/IT Incident | Archive (closed) |
| Central Colorado Dermatology, PC | Healthcare Provider | 4,065 | Aug 3, 2018 | Hacking/IT Incident | Archive (closed) |
| Kaiser Foundation Health Plan of Colorado | Health Plan | 900 | Aug 3, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Rocky Mountain Health Care Services | Healthcare Provider | 2,442 | Jul 13, 2018 | Theft | Archive (closed) |
| Dino-Peds | Healthcare Provider | 1,357 | May 30, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Front Range Dermatology Associates, P.C. | Healthcare Provider | 1,070 | Mar 7, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Longs Peak Family Practice, P.C. | Healthcare Provider | 16,238 | Dec 27, 2017 | Hacking/IT Incident | Archive (closed) |
| Colorado Department of Human Services | Healthcare Provider | 639 | Dec 27, 2017 | Hacking/IT Incident | Archive (closed) |
| Rocky Mountain Health Care Services | Healthcare Provider | 909 | Nov 16, 2017 | Theft | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.