The Colorado Department of Health Care Policy and Financing suffered a data breach after one of its service providers became a victim of the global cyber security incident resulting from the exploitation of a zero-day vulnerability in the MOVEit Transfer web application.