2026 All About Women's Care — VPN intrusion; extortion attempt; 12,000 individuals (Apr)
Data compromised
Per AAWC notice and ClassAction.org summary: varying by person—names, dates of birth, SSNs, driver's license or ID numbers, clinical/treatment information, lab results, prescriptions, provider and insurance information, medical documents, ultrasound images, passport or ID copies
Technical writeup
Verified healthcare data breach — disclosed June 2026. All About Women's Care (AAWC), a Colorado OB/GYN provider with locations in Englewood and Littleton, discovered suspicious activity involving an employee VPN account on April 9, 2026. Forensic specialists determined an unauthorized actor entered AAWC's network, accessed and stole certain files, and attempted to extort the organization. AAWC completed identifying affected individuals on or about June 5, 2026 and began notification. The U.S. HHS OCR breach portal lists All About Women's Care with 12,000 individuals affected, submitted June 3, 2026, as a hacking/IT incident on a network server. Compromised categories vary by individual and may include SSNs, clinical and ultrasound records, lab results, insurance data, and copies of identification documents.
Root cause
Suspicious activity on an employee VPN account April 9, 2026; unauthorized actor entered network, stole files, and attempted to extort AAWC per company notice and HHS OCR filing