We are investigating a breach of customer data impacting Denver Health Medical Plan / SquareML.
Posted on November 2, 2026
Overview of the Denver Health Medical Plan / SquareML Data Breach
Barnow and Associates, P.C., a leading data breach litigation law firm, is investigating a recent cybersecurity incident involving Denver Health Medical Plan (DHMP) and its vendor SquareML. This breach may have exposed sensitive personal and health-related information, potentially affecting 238,083 individuals.
If you received a data breach notification from Denver Health Medical Plan or SquareML, our attorneys are here to help you understand your legal options.
Contact us today to discuss your rights and explore potential claims. Fill out our contact form or call us at (312) 621-2000.
About Denver Health Medical Plan and SquareML
Denver Health Medical Plan is an insurance company that provides health insurance to over 100,000 Coloradans. It is based in Denver, Colorado. SquareML is a healthcare AI analytics company based in New Jersey.
Details of the Data Breach
According to DHMP’s website notice, on August 14, 2026, DHMP was informed that an active access key associated with SquareML had been discovered on a publicly accessible website. These credentials may have been used to access a database maintained by SquareML containing information about DHMP’s 238,083 members. The period of potential exposure is reported as June 27, 2025, to August 18, 2026.
The website notice also states that the compromised account was read-only, meaning the access key could not be used to download, export, delete, or change any information. The incident was reported to the U.S. Department of Health and Human Services as affecting 238,083 individuals.
The investigation confirmed that the following information may have been exposed:
- names,
- dates of birth,
- city, state, and ZIP code,
- demographic information,
- health metrics including BMI, HbA1c, and eGFR,
- health plan eligibility data,
- provider names,
- and hospital admission, discharge, and transfer information.
Social Security numbers and financial information were not included.
Denver Health Medical Plan has begun notifying affected individuals.
What to Do If You Received a Data Breach Notification
If you were notified about the Denver Health Medical Plan / SquareML data breach, you may be eligible to join a class action lawsuit. Contact Barnow and Associates, P.C. to discuss your legal rights. Complete our contact form below or reach us at (312) 621-2000.
Steps to Protect Your Personal Information
To safeguard your data after this breach, consider the following steps:
- Review the Breach Notification: Carefully read the notice and retain it for your records.
- Enroll in Free Monitoring Services: If offered, consider signing up for complimentary credit or identity monitoring to detect suspicious activity.
- Update Passwords: Change passwords for online accounts, using strong, unique combinations.
- Monitor Financial Accounts: Regularly check bank and credit card statements for unauthorized transactions.
- Check Your Credit Report: Look for signs of identity theft by reviewing your credit history at AnnualCreditReport.com.
Potential Legal Outcomes for Affected Individuals
This data breach may lead to class action lawsuits due to inadequate cybersecurity measures. Affected individuals could seek compensation for:
- Costs of credit monitoring or identity theft protection
- Unauthorized charges or financial losses
- Time and effort spent addressing the breach
- Other non-financial harms
Our firm has a proven track record in data breach litigation, securing significant settlements for clients.
How Barnow and Associates, P.C. Can Help
Barnow and Associates, P.C. is dedicated to holding companies accountable for failing to protect consumer data. By joining a class action lawsuit, you may recover compensation for damages while advocating for stronger data security practices.
You may be eligible for recoveries related to:
- Privacy Violations: Compensation for unauthorized access to your personal information
- Mitigation Efforts: Reimbursement for time and resources spent addressing the breach
- Financial Losses: Recovery for direct costs, such as fraudulent charges
- Non-Financial Harms: Damages for emotional distress or inconvenience
Contact us today to verify your eligibility and explore your legal options. Call (312) 621-2000 or fill out our contact form.
