Ma'lumotlar sizib chiqishi
Sotuvchi kalitining sizib chiqishi Denver Health Plan a'zolarining 238 000 ta ma'lumotini xavf ostiga qo'ydi
Sizib chiqqan SquareML kirish kaliti shaxsiy va sog'liq ma'lumotlarini o'z ichiga olgan ma'lumotlar bazasiga kirish uchun ishlatilishi mumkin edi.
Muallif
Ionut Arghire
| 2026-yil 27-oktabr (ET 9:30)
Denver Health Medical Plan (DHMP) 238 000 kishiga ularning shaxsiy va sog'liq ma'lumotlari ma'lumotlar sizib chiqishi natijasida buzilishi mumkinligi haqida xabar bermoqda.
Denver, Kolorado shtatida joylashgan DHMP Denver Health and Hospital Authority tizimi tarkibidagi notijorat boshqariladigan parvarish tashkilotidir. Denver Health Medicaid Choice rejasi orqali u Denver va uchta atrofdagi okruglarda a'zolar uchun Health First Colorado (Medicaid) imtiyozlarini boshqaradi.
DHMP ma'lumotiga ko'ra, ma'lumotlar sizib chiqishi sog'liqni saqlash tahlillari uchun kodsiz platforma taqdim etadigan uchinchi tomon sotuvchisi SquareML bilan bog'liq.
DHMPning hodisa haqida xabariga (PDF) ko'ra, SquareML 2026-yil 14-avgustda sog'liq rejasi ma'muriga kirish kaliti tasodifan ommaviy foydalanish mumkin bo'lgan veb-saytda sizib chiqqanini ma'lum qilgan.
"Ushbu ma'lumotlar DHMPning 238 083 a'zosiga tegishli ma'lumotlarni o'z ichiga olgan SquareML tomonidan saqlanadigan ma'lumotlar bazasiga kirish uchun ishlatilishi mumkin edi," deydi DHMP.
Kirish kaliti 2025-yil 27-iyunda onlayn e'lon qilingan va 2026-yil 18-avgustda bekor qilingan. Ushbu davr mobaynida u ma'lumotlar bazasida saqlanadigan shaxsiy va sog'liq ma'lumotlariga kirish uchun ishlatilishi mumkin edi.
Reklama. O'qishni davom ettirish uchun pastga aylantiring.
"Buzilgan hisob faqat o'qish huquqiga ega edi, ya'ni kirish kaliti hech qanday ma'lumotni yuklab olish, eksport qilish, o'chirish yoki o'zgartirish uchun ishlatilishi mumkin emas edi," deb ta'kidlaydi DHMP.
Potensial buzilgan ma'lumotlar ismlar, tug'ilgan sanalar, pochta indekslari, shahar, shtat, demografik ma'lumotlar, sog'liq ko'rsatkichlari, sog'liq rejasi huquqiy ma'lumotlari, shifoxonaga qabul qilish, provayder nomi va chiqarish hamda o'tkazish ma'lumotlarini o'z ichiga oladi.
DHMP ma'lumotiga ko'ra, ma'lumotlar bazasi ijtimoiy ta'minot raqamlari yoki moliyaviy ma'lumotlarni saqlamagan.
"Hozirgi vaqtda DHMP a'zo ma'lumotlari ko'rilgan yoki noto'g'ri ishlatilganligi haqida hech qanday dalilga ega emas, faqat ular buzilishi mumkinligi haqida," deb ta'kidlaydi sog'liq rejasi filiali.
Hodisaga javoban, ma'lumotlar bazasiga kirish huquqiga ega bo'lgan barcha hisoblar parollari qayta o'rnatildi va DHMP hamda SquareML qo'shimcha tuzatish choralarini ko'rmoqda.
Bog'liq: Quest Diagnostics ma'lumotlar sizib chiqishi "Ba'zi bemor yozuvlari"ni fosh qildi
Bog'liq: Paradigm Healthcare ma'lumotlar sizib chiqishi 970 000 Medi-Cal a'zosiga ta'sir qildi
Bog'liq: iRhythm ma'lumotlar sizib chiqishi kamida 360 000 kishiga ta'sir qildi
Bog'liq: Oracle Health ma'lumotlar sizib chiqishi deyarli 20 millionga yetdi
Yozgan: Ionut Arghire
Ionut Arghire SecurityWeek uchun xalqaro muxbirdir.
Kundalik xabarlar axborotnomasi
So'nggi kiberxavfsizlik tahdidlari, tendentsiyalar va mutaxassis fikrlari haqida xabardor bo'lish uchun SecurityWeek elektron pochta axborotnomasiga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Ionut Arghiredan ko'proq
- Genesys Hack ichki tizimlardan mijoz ma'lumotlarini fosh qildi
- 953 ta onlayn do'kon uzoq davom etgan zararli dastur kampaniyasida yuqtirildi
- Golland politsiyasi bank hisoblaridan 400 000 dollardan ortiq mablag'ni o'g'irlagan NFC relay hujumlari bo'yicha ikki kishini hibsga oldi
- Mythos 5 iyul hujumida haqiqiy dunyo zararini e'tiborsiz qoldirdi
- Xitoy APT ConnectWise hujumlarida AI pentest vositasi Artexdan foydalanadi
- Hujumchilar to'rt oy ichida uchinchi Arista VCO nol kunlik zaifligidan foydalanmoqda
- Capcom ma'lumotlar sizib chiqishi 11 million kishiga ta'sir qildi
- LiteLLM yangi ta'minot zanjiri hujumida buzildi
So'nggi yangiliklar
- HPE tarmoq mahsulotlaridagi o'nlab muhim kamchiliklarni tuzatdi
- Tushuntirilmagan DreamHost hodisasi elektron pochta, FTP parollarini qayta o'rnatishga majbur qildi
- iOS, macOS 27.2 286 ta xatoni tuzatdi; iOS 18 ga qayta portlangan ekspluatatsiya qilingan zaiflik tuzatildi
- Anthropic investorlar uchun xavflar, jumladan, nazoratsiz AI dan mumkin bo'lgan zararlar bayon qilindi
- Bu normal: NetScaler nol kunlik zaifliklari yangi normal haqida nima aytadi
- O'lik Popcorn Time yangilovchisi millionlab kompyuterlarni egallash xavfiga duchor qildi
- Dengiz koalitsiyasi kemalar va port tizimlari uchun bepul zaiflik ma'lumotlar bazasini ishga tushirdi
- Kiberxavfsizlik muammosi yirik Nyu-Meksiko shifoxonasini bemorlarni boshqa joyga yo'naltirishga va klinikalarni yopishga majbur qildi
Trend
Node2Shell: Brotli zaifligi Microsoft, Node.js, Python paketlari bo'ylab tuzatishlarni keltirib chiqardi
PHP2Shell ekspluatatsiyasi tekshiruvlardan ishlaydigan shellarga o'tdi
Mirai botnet operatorlari PHP2Shell hujumlariga ASLR aylanib o'tish ekspluatatsiyalari bilan qo'shildi
SecurityWeek tahlili: 2024-yilning birinchi yarmida 178 ta kiberxavfsizlik M&A bitimi e'lon qilindi
953 ta onlayn do'kon uzoq davom etgan zararli dastur kampaniyasida yuqtirildi
Genesys Hack ichki tizimlardan mijoz ma'lumotlarini fosh qildi
Xitoy APT ConnectWise hujumlarida AI pentest vositasi Artexdan foydalanadi
Golland politsiyasi bank hisoblaridan 400 000 dollardan ortiq mablag'ni o'g'irlagan NFC relay hujumlari bo'yicha ikki kishini hibsga oldi
Kundalik xabarlar axborotnomasi
So'nggi tahdidlar, tendentsiyalar va texnologiyalar haqida xabardor bo'lish, shuningdek, soha mutaxassislarining chuqur fikrlarini olish uchun SecurityWeek elektron pochta axborotnomasiga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Vebinar: Sizning Google Workspace'dagi AI kirish xavfi allaqachon mavjud
2026-yil 19-oktabr
Google Workspace bilan bog'langan AI vositalari millionlab nozik elektron pochta va fayllarga kirishi mumkin. Tashkilotingizning xavfini aniqlash va AI kirishini boshqarish uchun ramka o'rganish uchun ushbu sessiyaga qo'shiling.
Ro'yxatdan o'ting
Virtual tadbir: CISO Forum 2026 Sammiti
2026-yil 10 va 11-noyabr
Biz CISOlar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik rahbarlarini amaliy tajriba almashish va korxona kiberxavfsizlik strategiyasini shakllantiradigan masalalarni ko'rib chiqish uchun birlashtiramiz.
Ro'yxatdan o'ting
Harakatdagi odamlar
CISA Kan Wangni CFO va Khoi Nguyenni CAE sifatida qasamyod qildi.
Cequence Security Russ Schaferni CMO etib tayinladi.
Mona Harrington DHSda Kiber integratsiya bo'yicha yordamchi direktor etib tayinlandi.
Harakatdagi ko'proq odamlar
Mutaxassis fikrlari
Bu normal: NetScaler nol kunlik zaifliklari yangi normal haqida nima aytadi
Parchalash quvurlarini tayyor saqlang, chunki tez orada Citrix NetScaler tuzatishlarining yangi to'plami chiqarilishi mumkin. (Tod Beardsley)
AI dasturiy ta'minot xavfsizligining kaliti tezlik emas, balki yetuklik
Sizning dasturchilaringiz AI qabul qilish shkalasida qayerda joylashganligi xavfsizlik xavfini qanday hal qilayotganingizga haqiqiy ta'sir ko'rsatadi. (Matias Madou)
Kontekst zamonaviy kiberhujumlarga qarshi kurashda qirol
Kontekstual himoya xavfsizlik jamoalariga signallarni bog'lash, keyingi qadamni oldindan bilish va tahdidlar kuchayishidan oldin ularni to'xtatishga yordam beradi. (Etay Maor)
AI hujum tezligini o'zgartirdi, xavfsizlik asoslarini emas
AI zaifliklarni aniqlash va ekspluatatsiya qilishni tezlashtirgan sari, virtual tuzatish hali ham chuqur himoya va kuchli ilova xavfsizligi asoslariga bog'liq. (Joshua Goldfarb)
Kelajakda katta rejalar tuzgan to'rtta kiber tahdid
- AI, ta'minot zanjiri ta'siri, kvant hisoblash va geosiyosiy ziddiyat xavfsizlik dasturlarini sinovdan o'tkazmoqda. Buzilishlarga tayyorgarlik kundalik operatsiyalarning bir qismiga aylanishi kerak. (Steve Durbin)
Data Breaches
Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
A leaked SquareML access key could have been used to access a database containing personal and health information.
By
Ionut Arghire
| October 27, 2026 (9:30 AM ET)
*
Denver Health Medical Plan (DHMP) is notifying 238,000 people that their personal and health information may have been compromised in a data breach.
Based in Denver, Colorado, DHMP is a non-profit managed care organization within the Denver Health and Hospital Authority system. Through its Denver Health Medicaid Choice plan, it administers Health First Colorado (Medicaid) benefits for members in Denver and three surrounding counties.
The data breach, DHMP says, involved third-party vendor SquareML, which provides a no-code platform for healthcare analytics.
According to DHMP’s incident notice (PDF), SquareML notified the health plan administrator on August 14, 2026, that an access key was inadvertently leaked on a publicly accessible website.
“These credentials may have been used to access a database maintained by SquareML containing information about DHMP’s 238,083 members,” DHMP says.
The access key was published online on June 27, 2025, and was revoked on August 18, 2026. During this window, it could have been used to access the personal and health information stored in the database.
Advertisement. Scroll to continue reading.
“The compromised account was read-only, meaning the access key could not be used to download, export, delete, or change any information,” DHMP notes.
The potentially compromised information includes names, dates of birth, ZIP codes, city, state, demographic information, health metrics, health plan eligibility data, hospital admission, provider name, and discharge and transfer data.
According to DHMP, the database did not store Social Security numbers or financial information.
“At this time, DHMP has no evidence that member information was viewed or misused, only that it may have been,” the health plan affiliate notes.
In response to the incident, the passwords for all accounts that had access to the database were reset, and DHMP and SquareML are pursuing additional remedial actions.
Related:Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’
Related:970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach
Related:iRhythm Data Breach Impacts at Least 360,000 People
Related:Oracle Health Data Breach Tally Climbs to Nearly 20 Million
Written ByIonut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Ionut Arghire
- Genesys Hack Exposes Customer Data From Internal Systems
- 953 Online Stores Infected in Long-Lasting Malware Campaign
- Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts
- Mythos 5 Ignored Real-World Harm in July Attack
- China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
- Attackers Exploit Third Arista VCO Zero-Day in Four Months
- 11 Million Impacted by Capcom Data Breach
- LiteLLM Compromised in Fresh Supply Chain Attack
Latest News
- HPE Patches Dozens of Critical Flaws in Networking Products
- Unexplained DreamHost Incident Prompts Email, FTP Password Resets
- iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
- Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI
- This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
- Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover
- Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
- Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics
Trending
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
PHP2Shell Exploitation Moves From Probes to Working Shells
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
SecurityWeek Analysis: 178 Cybersecurity M&A Deals Announced in First Half of 2024
953 Online Stores Infected in Long-Lasting Malware Campaign
Genesys Hack Exposes Customer Data From Internal Systems
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: The AI Access Risk Already in Your Google Workspace
October 19, 2026
AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
CISA has sworn in Kan Wang as CFO and Khoi Nguyen as CAE.
Cequence Security has appointed Russ Schafer as CMO.
Mona Harrington has been named Assistant Director for Cyber Integration at DHS.
More People On The Move
Expert Insights
*
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)
AI Has Changed Attack Speed, Not Security Fundamentals
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.(Joshua Goldfarb)
Four Cyber Threats Harboring Big Plans for the Future
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations.(Steve Durbin)