HIPAA Magazine Steve Alder reported on September 23 that the CorrectCare Integrated Health The data breach lawsuit was settled for $6.49 million. CorrectCare, a Kentucky-based medical claims processor for correctional facilities, experienced a cybersecurity breach between January 22, 2022 and July 7, 2022. The breach, which affected approximately 600,000 people, was not reported until November of 2022.
«In July 2022, CorrectCare identified a misconfiguration on its web server that allowed two file directories to be accessed over the Internet without authentication,» Alder wrote.
Shub & John’s Attorney Benjamin F. Johns, filed a class action lawsuit against CorrectCare on December 7, 2022. “On September 17, 2024, Chief Judge Danny C. Reeves issued an order granting final approval to the 6.9 settlement. million dollars,” Alder said.
More than 100,000 claims were filed, representing about 17 percent of the class action.
