CorrectCare Integrated Health
Disclosed Oct 31, 20223 years ago4,380 affectedConfirmed
The covered entity (CE), CorrectCare Integrated Health, Inc., reported that an employee posted the protected health information (PHI) of 4,380 individuals over the Internet. The PHI involved included names, dates of birth, social security numbers, diagnoses/conditions, lab results, and medications. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach the CE implemented additional administrative, technical, and security safeguards.
What is known
| People affected | 4,380 (as reported to HHS) |
|---|---|
| Disclosed | Oct 31, 2022 |
| Happened | Jan 22, 2022 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: CorrectCare Integrated Healthoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): CorrectCare Integrated Health (Business Associate, KY)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Oct 31, 2022 | |
| HHS archivetotal | Oct 31, 2022 | 4,380 |
History of this record
- 2026-09-25 · attack: unknown to insider · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 4380 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), CorrectCare Integrated Health, Inc., reported that an employee posted the protected health information (PHI) of 4,380 individuals over the Internet. The PHI involved included names, dates of birth, social security n · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.