Health First Colorado Members Notified of Potential Release of Information

DXC Technology finds possible exposure during proactive security review


July 13, 2017

Media Contacts:
DXC Technology
Donna Jenks, Corporate Media Relations, (630)-306-9989,
Rich Adamonis, Corporate Media Relations, (862)-228-3481,

Colorado Department of Health Care Policy and Financing
Marc Williams, Public Information Officer, (303)-866-3144,

Denver, CO – The Department of Health Care Policy and Financing contracts with DXC Technology to serve as its fiscal agent for Department programs such as Health First Colorado (Colorado’s Medicaid program).

On May 10, 2017, DXC Technology conducted a proactive security review of its Colorado interChange provider portal. The provider portal is used by Health First Colorado providers to submit and manage claims for services to Health First Colorado members. The security review determined that an internet hyperlink to twelve Health First Colorado billing reports containing non-financial, protected health information of 822 individuals, was potentially accessible between March 1, 2017 and May 10, 2017. DXC Technology has taken the appropriate steps to mitigate the situation and notify all potentially impacted individuals.

The billing reports included the following information:

  • Medicaid Member Name
  • Medicaid ID number
  • The name and address of the doctor or health care provider who provided services to individuals
  • Patient Number (the number assigned to individuals at the health care provider’s office)
  • Procedure code (the number assigned to the individual health care service received)
  • Date of service (the date the individual received the health care service)
  • Payment amount (the amount Medicaid paid the doctor or health care provider)

No other information – such as social security numbers, dates of birth or addresses - was accessible.

While DXC Technology has no reason to believe this information has been used inappropriately, DXC is offering one year of free credit protection service to impacted individuals. 

Health First Colorado members who have additional questions about the privacy incident can call Health First Colorado at 844-235-2387 and press option 2, then press option 7 to speak with an agent. Securing the private information of the residents of Colorado is a top priority for the Department and DXC Technology.


About the Colorado Department of Health Care Policy and Financing: The Department administers Health First Colorado (Colorado's Medicaid Program) and Child Health Plan Plus as well as a variety of other programs for Coloradans who qualify. For more information about the Department, please visit