The Colorado Department of Health Care Policy and Financing has acknowledged that the agency that runs the state’s Medicaid program was caught up in the cyberattack, affecting the medical and health data of about 4.1 million patients.
The agency’s data breach notification said that use of MOVEit by IBM, which had yet to publicly acknowledge an impact from the hacks, was the cause of the Colorado breach.