AccidentalMisconfigurationData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICMediumContained
CorrectCare Integrated Health, Inc.
bd_4d14a7ac85bf85c1 · schema v1 · pii pii-v1
Full breach record for CorrectCare Integrated Health, Inc. →CorrectCare Integrated Health, Inc. disclosed a data breach involving the inadvertent public exposure of a misconfigured web server containing Protected Health Information (PHI) and government identifiers (SSN, DOB, CDCR number) of incarcerated individuals. The exposure occurred from January 22, 2022, to July 6, 2022. CorrectCare secured the server within 9 hours, engaged forensic investigators, and offered 12 months of Experian IdentityWorks to affected individuals.
California clockDiscovered Jul 6, 2022 → Notified Oct 31, 2022117d ✗ CA 60-day late17 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_c298f148370b91daNew Hampshire State AGfiled 2023-05-22(203d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-558759
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 31, 2022
- Raw hash
- e6f3fc4818f5c839a42c6a01ec53f7b680e9256a8587c723731c961f6aac8c5f
Reporting entity
- Name
- CorrectCare Integrated Health, Inc.norm: correctcare integrated health
Victim entity
- Name
- CorrectCare Integrated Health, Inc.norm: correctcare integrated health
Incident
- Discovered
- Jul 6, 2022
- Materiality determined
- —
- Notification sent
- Oct 31, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
Compliance
- Time to disclose
- 17 weeks(117 days from discovery to filing)
- Compliance flags
- CA 60-day late · 117d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 6, 2022→ Notified: Oct 31, 2022117d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.