The Colorado Mental Health Institute at Pueblo ( CMHIP ) experienced a potential data breach after a staff member on Nov. 1 , unintentionally allowed access to a state - issued computer through a phishing scam . ;