Colorado wellness company suffers data breach