.png)
SquareML Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the SquareML data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About SquareML
SquareML is a computer software company founded in 2021 that specializes in no-code artificial intelligence and machine learning analytics platforms. The company provides solutions for organizations in healthcare, banking, insurance, retail and manufacturing, enabling them to analyze data and automate workflows without the need for traditional coding.
What Happened?
On Aug. 14, 2026, Denver Health Medical Plan (DHMP) was notified that an active access key associated with SquareML had been found on a publicly accessible website. The key may have allowed unauthorized access to a database containing information about 238,083 DHMP members.
The credentials were inadvertently published on June 27, 2025, and remained accessible until the key was deactivated on Aug. 18, 2026. The compromised account was read-only, meaning data could not be changed or deleted, but it could have been viewed.
The exposed information did not include Social Security numbers or financial data. However, the following types of sensitive information were potentially exposed:
Information Exposed:
- Full names
- Dates of birth
- Cities, states and ZIP codes
- Demographic information
- Health metrics including BMI, HbA1c and eGFR
- Health plan eligibility data
- Provider names
- Hospital admission, discharge and transfer information
You May Be Entitled to Compensation
If your information was exposed in the SquareML data breach, you may be entitled to compensation. Lawyers are actively investigating this incident and are ready to help you take action to protect your rights.
To find out if you qualify and to join the lawsuit, complete the below form. This is the first step toward holding companies accountable for failing to safeguard your sensitive information.
.svg)