173 Colorado State Workers Laid Off After Cybersecurity Failures

2026-05-29
173 Colorado State Workers Laid Off After Cybersecurity Failures

Denver, Colorado – The Colorado Governor's Office of Information Technology (GOIT) has laid off 173 state employees this week, alongside the replacement of the department director. The move follows two recent unsuccessful cybersecurity audits, raising concerns about the state's digital security.

The significant job losses impact a substantial portion of GOIT's workforce. State officials confirmed the layoffs occurred as part of a restructuring effort aimed at addressing the shortcomings identified in the cybersecurity reviews. Details regarding the specific roles affected and the criteria used for selection have not been publicly released.

The two failed audits highlight vulnerabilities within the state’s IT infrastructure and data protection protocols. While the specifics of the audit findings remain confidential, they reportedly revealed critical weaknesses that could potentially expose sensitive state information and systems to cyber threats. The Governor’s office has stated a commitment to rectifying these issues and strengthening cybersecurity measures across all state agencies.

The outgoing director’s tenure coincided with the period when these vulnerabilities were discovered. The Governor’s office has not provided specific reasons for the director’s replacement, but it is widely understood to be linked to the cybersecurity audit outcomes. A search for a new director is underway, with a focus on candidates possessing extensive experience in cybersecurity leadership and risk management.

Colorado's state government relies heavily on technology for delivering essential services to citizens. The GOIT is responsible for managing and securing the state’s IT systems, including those used by various departments like transportation, health, and education. These layoffs and leadership change underscore the importance of robust cybersecurity practices and the potential consequences of failing to adequately protect state data and infrastructure. Further updates are expected as the state implements its revised cybersecurity strategy.

Read more
Recommendations
Recommendations