CorrectCare Integrated Health, Inc.
ent_fd0560a3285f7e60a6b1de1f
Disclosures
6
State AG · HHS OCR · 4 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
502,089
nationwide · HHS OCR KY
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- CorrectCare Integrated Health, Inc.
- Normalized
- correctcare integrated health— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (6)newest first
- New Hampshire State AGas victim2023-05-22
CorrectCare Integrated Health, LLC, a third-party health administrator, notified the New Hampshire Attorney General of a data security incident. On July 6, 2022, the company discovered that two file directories on a web server were inadvertently exposed to the public internet due to a misconfiguration. Investigation revealed patient information may have been accessible since January 22, 2022. The incident affected 391 New Hampshire residents, exposing PHI and PII. CorrectCare secured the server within nine hours, engaged forensic investigators, and offered 12 months of identity protection services. No misuse of information was detected.
- Massachusetts State AGas victim2023-04-21
CorrectCare Integrated Health, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-04-21. 8 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2023-04-21
CorrectCare Integrated Health, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-04-21. 8 Massachusetts residents were affected. The report records the breach type as electronic.
- California State AGas victim2022-10-31
CorrectCare Integrated Health, Inc., a third-party health administrator for Health Net Federal Services, discovered on July 6, 2022, that two file directories on its web server were inadvertently exposed to the public internet due to a misconfiguration. The exposure, which began as early as January 22, 2022, contained protected health information (PHI) including names, dates of birth, SSNs, and diagnosis codes for incarcerated individuals. CorrectCare secured the server within 9 hours and engaged forensic investigators. No evidence of data misuse was found. Complimentary identity monitoring was offered to affected individuals.
- KENTUCKYHHS OCRas victim2022-10-31
CorrectCare Integrated Health, Inc. reported to HHS on 2022-10-31 a Unauthorized Access/Disclosure affecting 4380 individuals. Breached information located on Network Server. An employee posted PHI including names, DOBs, SSNs, diagnoses, and medications over the Internet.
- KENTUCKYHHS OCRas victim2022-10-31
CorrectCare Integrated Health, Inc. reported to HHS on 2022-10-31 a Unauthorized Access/Disclosure affecting 502,089 individuals. Breached information located on Network Server. An employee posted PHI including names, DOBs, SSNs, diagnoses, and medications over the Internet.