CorrectCare, a medical claims processor, suffered a cybersecurity breach where a web server misconfiguration from January 22, 2022, to July 7, 2022, led to unauthorized internet access to two file directories. Approximately 600,000 individuals were affected by the data breach, which included personal information and was not disclosed until November 2022. A resulting class action lawsuit was settled for $6.49 million.
TPRM report: https://scoringcyber.rankiteo.com/company/correctcare-integrated-health
"id": "cor000103124",
"linkid": "correctcare-integrated-health",
"type": "Breach",
"date": "9/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '600,000 individuals',
'industry': 'Healthcare',
'name': 'CorrectCare',
'type': 'Medical Claims Processor'}],
'attack_vector': 'Web Server Misconfiguration',
'data_breach': {'number_of_records_exposed': '600,000',
'type_of_data_compromised': 'Personal Information'},
'date_detected': '2022-07-07',
'date_publicly_disclosed': '2022-11-01',
'description': 'CorrectCare, a medical claims processor, suffered a '
'cybersecurity breach where a web server misconfiguration from '
'January 22, 2022, to July 7, 2022, led to unauthorized '
'internet access to two file directories. Approximately '
'600,000 individuals were affected by the data breach, which '
'included personal information and was not disclosed until '
'November 2022. A resulting class action lawsuit was settled '
'for $6.49 million.',
'impact': {'data_compromised': 'Personal Information',
'financial_loss': '$6.49 million',
'legal_liabilities': 'Class action lawsuit'},
'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
'title': 'CorrectCare Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Web Server Misconfiguration'}