CorrectCare Integrated Health, Inc.
bd_4d14a7ac85bf85c1 · schema v1 · pii pii-v1
Full breach record for CorrectCare Integrated Health, Inc. →2 incidents on fileCorrectCare Integrated Health, Inc., a third-party health administrator for Health Net Federal Services, discovered on July 6, 2022, that two file directories on its web server were inadvertently exposed to the public internet due to a misconfiguration. The exposure, which began as early as January 22, 2022, contained protected health information (PHI) including names, dates of birth, SSNs, and diagnosis codes for incarcerated individuals. CorrectCare secured the server within 9 hours and engaged forensic investigators. No evidence of data misuse was found. Complimentary identity monitoring was offered to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Jan 22, 2022
Begins
Jul 6, 2022
Discovered
Oct 31, 2022
Filed
vs. sector median
+4 wks slower
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- HHS OCRbd_a793832c51c013362022-10-31Verified
- HHS OCRbd_f3c7265441edcde02022-10-31Verified
- New Hampshire State AGbd_c298f148370b91da2023-05-22 · +203dVerified
Filing propagation · 4 filings · 3 states
View merged incident ↗Pattern: first filing Oct 31 (KY), last May 22 (NH) — a 203-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.