CorrectCare Integrated Health, a Kentucky-based claims processor, settled a data breach lawsuit for $6.49 million after a cybersecurity breach exposed personal information of around 600,000 people. The breach occurred between January 22, 2022, and July 7, 2022, due to a misconfigured web server that left directories accessible online without authentication. The incident, however, was not reported until November 2022. Subsequently, a class action lawsuit was filed, and a settlement was reached with over 100,000 claims representing 17 percent of the affected class.
"id": "cor001031725",
"linkid": "correctcare-integrated-health",
"type": "Breach",
"date": "9/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"