CO · HHS OCR reports
HIPAA breaches in Colorado
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Colorado.
Reports
142
Individuals affected
29,384,025
Under investigation
18
Top type: Hacking/IT Incident
State breach notification law
Colo. Rev. Stat. § 6-1-716 (Colorado Consumer Protection Act - Notification of Security Breach) (amended 2018)
Timing: 30 days Colorado requires businesses/covered entities to notify affected individuals in the most expedient
Read the Colorado data breach notification law summaryAll reports, newest first
Page 3 of 3. 142 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Family & Cosmetic Dentistry of the Rockies | Healthcare Provider | 1,850 | Nov 13, 2017 | Improper Disposal | Archive (closed) |
| Children's Hospital Colorado | Healthcare Provider | 3,370 | Sep 8, 2017 | Hacking/IT Incident | Archive (closed) |
| Centura Health, Mercy Family Medicine | Healthcare Provider | 2,069 | Aug 16, 2017 | Loss | Archive (closed) |
| Vision Care Specialists, Inc. | Healthcare Provider | 703 | Jul 20, 2017 | Theft | Archive (closed) |
| PVHS-ICM Employee Health and Wellness, LLC as covered entity and business associate | Healthcare Provider | 10,143 | Jul 3, 2017 | Hacking/IT Incident | Archive (closed) |
| Enterprise Services LLC | Business Associate | 822 | Jun 30, 2017 | Hacking/IT Incident | Archive (closed) |
| Durango Family Medicine, P.C. | Healthcare Provider | 18,790 | Jun 6, 2017 | Theft | Archive (closed) |
| Madison Street Provider Network | Business Associate | 9,129 | Apr 12, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Rocky Mountain Health Maintenance Organization, Inc. | Health Plan | 1,320 | Mar 17, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| VA Eastern Colorado Health Care System | Healthcare Provider | 2,130 | Nov 8, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Lasair Aesthetic Health, P.C. | Healthcare Provider | 1,835 | Jul 11, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Allergy, Asthma & Immunology of the Rockies, PC | Healthcare Provider | 6,851 | Jun 17, 2016 | Hacking/IT Incident | Archive (closed) |
| Vincent Vein Center | Healthcare Provider | 2,250 | Jun 7, 2016 | Hacking/IT Incident | Archive (closed) |
| Vail Clinic, Inc. dba Vail Valley Medical Center, and dba Howard Head Sports Medicine | Healthcare Provider | 3,118 | Apr 15, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Sisters of Charity of Leavenworth Health System Health Benefits Plan | Business Associate | 540 | Apr 5, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Mind Springs Health | Healthcare Provider | 2,147 | Feb 27, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| University of Colorado Health | Healthcare Provider | 827 | Dec 2, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Colorado Department of Health Care Policy and Financing | Health Plan | 1,622 | Aug 18, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| VA Eastern Colorado Health Care System(ECHCS) | Healthcare Provider | 508 | Apr 2, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Pediatric Gastroenterology Consultants | Healthcare Provider | 5,000 | Dec 19, 2014 | Theft | Archive (closed) |
| Colorado Department of Health Care Policy & Financing | Health Plan | 15,380 | Oct 10, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Madison Street Provider Network | Healthcare Provider | 523 | Sep 26, 2014 | Theft | Archive (closed) |
| Kaiser Foundation Health Plan of Colorado | Health Plan | 11,551 | Aug 12, 2014 | Other, Unauthorized Access/Disclosure | Archive (closed) |
| Colorado Neurodiagnostics, PLLC | Healthcare Provider | 750 | Jun 23, 2014 | Theft | Archive (closed) |
| Centura Health | Healthcare Provider | 12,286 | Apr 22, 2014 | Hacking/IT Incident | Archive (closed) |
| Valley View Hospital Association | Healthcare Provider | 5,415 | Mar 14, 2014 | Hacking/IT Incident | Archive (closed) |
| Colorado Community Health Alliance (CCHA)/Physicians Health Partners | Business Associate | 1,918 | Jan 2, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Colorado Health & Wellness, Inc. | Healthcare Provider | 651 | Nov 2, 2013 | Theft, Unauthorized Access/Disclosure | Archive (closed) |
| Rose Medical Center | Healthcare Provider | 606 | Oct 14, 2013 | Improper Disposal | Archive (closed) |
| Sarah Benjamin, DPM - Littleton Podiatry | Healthcare Provider | 3,512 | Sep 28, 2013 | Theft | Archive (closed) |
| Janna Benkelman LPC LLC | Healthcare Provider | 1,500 | Sep 3, 2013 | Theft | Archive (closed) |
| Summit Community Care Clinic, Inc. | Healthcare Provider | 921 | Aug 27, 2013 | Hacking/IT Incident | Archive (closed) |
| Rocky Mountain Spine Clinic | Healthcare Provider | 532 | Jul 31, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| Memorial Health System | Healthcare Provider | 6,262 | Nov 7, 2012 | Loss | Archive (closed) |
| Metro Community Provider Network | Healthcare Provider | 3,200 | Jan 27, 2012 | Hacking/IT Incident, Other | Archive (closed) |
| Colorado Department of Health Care Policy and Financing | Health Plan | 3,589 | Aug 16, 2011 | Loss | Archive (closed) |
| Memorial Health Systems | Healthcare Provider | 2,300 | Jul 15, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Department of Personnel and Administration | Business Associate | 3,589 | Jun 29, 2011 | Theft | Archive (closed) |
| Jefferson Center for Mental Health | Healthcare Provider | 546 | Feb 7, 2011 | Theft | Archive (closed) |
| Aspen Dental Care P.C. | Healthcare Provider | 2,500 | Oct 26, 2010 | Theft | Archive (closed) |
| Governor's Office of Information Technology | Business Associate | 105,470 | Jul 9, 2010 | Theft | Archive (closed) |
| VA Eastern Colorado Health Care System | Healthcare Provider | 649 | May 5, 2010 | Theft | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.