Department of Health Care Policy & Financing Data Security Incident

On May 31, The Department of Health Care Policy and Financing (HCPF) experienced a data security incident that involved certain individuals’ personal information and/or protected health information. Read HCPF’s August 11 new release for more information on what happened.

What Information Was Involved?

The information may have included one or more of the following pieces of information for certain individuals: full name, Social Security number, Medicaid ID number, Medicare ID number, date of birth, home address and other contact information, demographic or income information, clinical and medical information (such as diagnosis/condition, lab results, medication, or other treatment information), and health insurance information.

What is HCPF Doing?

HCPF and its vendors are reviewing their policies, procedures and cybersecurity safeguards to further protect their systems. As an added precaution, HCPF is offering potentially impacted individuals two years of free credit monitoring and identity restoration services provided through Experian.

If you did not receive written notice of this incident but believe you may be affected, please call toll-free at 1-833-346-1583, Monday through Friday, 7 am – 9 pm, and Saturday and Sunday, 9 am – 6 pm Mountain Time (excluding major holidays). Please be prepared to provide engagement number B100639.

Individuals can learn more about how to protect themselves generally against the potential misuse of information by reviewing the guidance on HCPF’s website, Steps You Can Take to Protect Personal Information.