CorrectCare Integrated Health Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating CorrectCare Integrated Health regarding its recent data breach. The CorrectCare Integrated Health data breach involved sensitive personal identifiable information and protected health information belonging to an unknown number of individuals.


CorrectCare Integrated Health is a third-party insurance administrator that specializes in working with correctional facilities. Founded in 2009, CorrectCare Integrated Health offers a range of services for the prison population, including facilitating and managing access to medical providers and processing claims payments. Additionally, CorrectCare Integrated Health conducts business with correctional facilities that range from small and local prisons to entire state systems. Headquartered in Lexington, Kentucky, CorrectCare Integrated Health aims to prioritize cost reduction without sacrificing inmate well-being.


On July 6, 2022, CorrectCare Integrated Health discovered that it had experienced a data breach in which the sensitive personal identifiable information and protected health information in two of its file directories had been made publicly available online. Through its investigation, CorrectCare Integrated Health concluded that a misconfigured web server had publicly exposed the sensitive information of patients who had received medical care between January 1, 2012, and July 6, 2022. Furthermore, CorrectCare Integrated Health determined that the sensitive information had been publicly available online since as early as January 22, 2022. On October 31, 2022, CorrectCare Integrated Health began notifying individuals whose information may have been impacted. The type of information impacted includes:

  • Name
  • Social Security number
  • Date of birth
  • California Department of Corrections and Rehabilitation number
  • Medical information (e.g., diagnosis code, current procedure terminology code)

If you received a breach notification letter from CorrectCare Integrated Health:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or

If you were impacted by the CorrectCare Integrated Health data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring service provided by CorrectCare Integrated Health;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: