Vendor Key Leak Exposes Denver Health Plan Member Data

# Vendor Key Leak Exposes Denver Health Plan Member Data

https://gcdradar.vercel.app/incidents/vendor-key-leak-exposes-denver-health-plan-member-data · AIR-2026-1597 · closed 2026-11-10

- Lane: Breaches & attacks
- Severity: 4 (Confirmed real-world loss): Confirmed exposure of sensitive health and personal records for 238,000 individuals.
- Fix status: No fix needed
- First reported: 2026-10-27
- AI role: No AI role
- Products: SquareML

## Summary

A leaked access key for SquareML exposed a database containing personal and health information of 238,000 Denver Health plan members. The incident highlights risks associated with improperly secured third-party credentials.

## What to do

Revoke compromised vendor keys and audit access logs.

## Latest updates

- 2026-10-27: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk (https://securityweek.com/vendor-key-leak-puts-data-of-238000-denver-health-plan-members-at-risk)

## Sources

- 2026-10-27 SecurityWeek: Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk https://securityweek.com/vendor-key-leak-puts-data-of-238000-denver-health-plan-members-at-risk

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.