CorrectHealth

The Maine Office of the Attorney General reported a data breach involving CorrectHealth on August 25, 2022. The incident, discovered on November 10, 2021, involved unauthorized access to employee email accounts, potentially affecting the Social Security numbers of 54,066 individuals, with 3 Maine residents specifically impacted. Identity theft protection services were offered for 12 months through IDX.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7b84f223-3af8-4c22-88c6-ae8d58659055.shtml

TPRM report: https://www.rankiteo.com/company/correcthealth

"id": "cor400072925",
"linkid": "correcthealth",
"type": "Breach",
"date": "11/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 54066,
                        'name': 'CorrectHealth',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 54066,
                 'personally_identifiable_information': 'Social Security '
                                                        'numbers',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Social Security numbers'},
 'date_detected': '2021-11-10',
 'date_publicly_disclosed': '2022-08-25',
 'description': 'Unauthorized access to employee email accounts potentially '
                'affecting the Social Security numbers of 54,066 individuals.',
 'impact': {'data_compromised': ['Social Security numbers'],
            'identity_theft_risk': 'High',
            'systems_affected': ['Employee email accounts']},
 'references': [{'date_accessed': '2022-08-25',
                 'source': 'Maine Office of the Attorney General'}],
 'title': 'Data Breach at CorrectHealth',
 'type': 'Data Breach'}