UCHealth Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating University of Colorado Hospital Authority, which does business as UCHealth, regarding its recent data breach. UCHealth conducts business with a software vendor, Diligent Corporation, that recently experienced a data breach exposing sensitive information belonging to UCHealth. The UCHealth and Diligent Corporation data breach involved sensitive personal identifiable information and protected health information belonging to over 48,800 individuals.


UCHealth is a non-profit healthcare provider with facilities throughout Colorado. Founded through a merger in 2012, UCHealth became the largest hospital system in Colorado, offering services in primary care, urgent care, emergency care, and specialty care. Accordingly, UCHealth works closely with the University of Colorado, providing access to experimental treatments and clinical trials. Currently, UCHealth operates 12 hospitals and manages more than $5 billion annually. Headquartered in Aurora, Colorado, UCHealth employs more than 24,000 individuals.


Recently, UCHealth’s software vendor, Diligent Corporation, discovered that it had experienced a data breach in which the sensitive personal identifiable information and protected health information in its systems may have been accessed and obtained. Through their investigation, UCHealth and Diligent Corporation determined that an unauthorized actor accessed and acquired this sensitive information. On January 17, 2023, UCHealth and Diligent Corporation began contacting individuals whose information may have been impacted. The information exposed includes:

  • Name
  • Social Security number
  • Date of birth
  • Address
  • Financial information
  • Medical information (e.g., treatment information)

If you received a breach notification letter from UCHealth or Diligent Corporation:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or sam@turkestrauss.com.

If you were impacted by the UCHealth or Diligent Corporation data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by University of Colorado Hospital Authority or Diligent Corporation;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: