Court grants Preliminary Approval of $6.49M Settlement in CorrectCare Data Breach Case

CorrectCare Data Breach

a lock over a laptop keyboardCorrectCare Integrated Health, LLC (“CorrectCare”), a Kentucky-based medical claims processor, experienced a cybersecurity incident that compromised private health and identification information for individuals treated at correctional facilities across the country. The unauthorized actor breached CorrectCare’s system information between January 22, 2022 and July 7, 2022, gaining access to data for individuals treated between January 1, 2012 through July 7, 2022. While the data breach occurred throughout the first half of 2022, CorrectCare did not announce the data breach until November, 2022, possibly leaving many individuals at risk of fraud without knowing the potential cause. The incident impacted sensitive information including names, dates of birth, inmate numbers, and limited health information, including diagnosis codes, CPT codes, treatment providers, dates of treatment, and, for some individuals, Social Security numbers. The data breach exposed approximately 443,093 individuals.

Shub & Johns attorney, Benjamin F. Johns, filed a class action lawsuit against CorrectCare on December 7, 2022 in the United States Court for the Eastern District of Kentucky. On March 24, 2023, Shub & Johns, along with co-counsel, filed a Consolidated Amended Complaint after the Kentucky court granted the Plaintiff’s motion to consolidate all actions against CorrectCare concerning the data breach on February 22, 2023. Benjamin F. Johns was appointed as Interim Co-Lead Counsel via the same Consolidation Order from the Court.

Preliminary Approval of the CorrectCare Settlement

On March 22, 2024, Plaintiffs in the consolidated CorrectCare data breach litigation filed a motion for preliminary approval for a class action Settlement totaling $6.49 million.

On April 29, 2024, the United States District Court for the Eastern District of Kentucky granted Plaintiffs’ Motion for Preliminary Approval of a class action settlement and has scheduled a Final Approval Hearing on September 16, 2024. The deadline for eligible class members to submit a claim as part of the settlement is August 27, 2024. For more information about the class action settlement. You can visit the settlement website here.

The case is In re CorrectCare Data Breach Litigation, No. 5:2022-cv-00319.

CorrectCare Data Breach Intake Form

Hello, thank you for your interest in our data breach class action lawsuit. This class action suit is currently engaged in settlement proceedings on a class wide basis. Eligible consumers should have been contacted via mailed notice, delivered by the settlement administrator.


Consumers seeking compensation for the effects of the data breach are able to make claims via the settlement site, which you can visit here. If you are an eligible class member and you have not submitted a claim as a part of this settlement, please make sure to do so before the claims submission deadline.


Thank you for visiting our website. If you have any additional class action inquiries, you can contact us by submitting an online intake form.