Ankura CTIX FLASH Update - August 18, 2023

Malware Activity

MOVEit Campaign Impacts Colorado Department of Health Care Policy and Financing, Exposing Over 4 million Individuals' Data

The Colorado Department of Health Care Policy and Financing (HCPF) has disclosed a data breach impacting over 4 million individuals. HCPF manages the Health First Colorado (Medicaid) and Child Health Plan Plus programs along with supporting low-income families, the elderly, and disabled citizens. The agency confirmed that the data breach stemmed from a third-party contractor, IBM, and that HCPF systems were not directly compromised. IBM notified HCPF that it was impacted by exploitation of the recent MOVEit vulnerability, CVE-2023-34362, and the vendor utilizes the application to "move HCPF data files in the normal course of business." On June 13, 2023, it was identified that HCPF files, specifically files that contained Health First Colorado and CHP+ members' information, on IBM's MOVEit application were accessed by an