CorrectCare Integrated Health

Disclosed Oct 31, 20224,380 affectedConfirmed

The covered entity (CE), CorrectCare Integrated Health, Inc., reported that an employee posted the protected health information (PHI) of 4,380 individuals over the Internet. The PHI involved included names, dates of birth, social security numbers, diagnoses/conditions, lab results, and medications. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach the CE implemented additional administrative, technical, and security safeguards.

What is known

People affected	4,380 (as reported to HHS)
Disclosed	Oct 31, 2022
Happened	Jan 22, 2022
Attack	Insider
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: CorrectCare Integrated Health

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): CorrectCare Integrated Health (Business Associate, KY)

Notices filed

Residents of CAOct 31, 2022

California AGCount not stated

TotalOct 31, 2022

HHS archive4,380 people

History of this record

attack2026-09-25

unknown to insiderby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 4380by backfillSource

summary2026-09-25

empty to The covered entity (CE), CorrectCare Integrated Health, Inc., reported that an employee posted the protected health information (PHI) of 4,380 individuals over the Internet. The PHI involved included names, dates of birth, social security nby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about CorrectCare Integrated Health