Parties in CorrectCare Data Breach File Motion for Preliminary Approval of $6.49M Settlement

CorrectCare Data Breach

a lock over a laptop keyboardCorrectCare Integrated Health, LLC (“CorrectCare”), a Kentucky-based medical claims processor, experienced a cybersecurity incident that compromised private health and identification information for individuals treated at correctional facilities across the country. The unauthorized actor breached CorrectCare’s system information between January 22, 2022 and July 7, 2022, gaining access to data for individuals treated between January 1, 2012 through July 7, 2022. While the data breach occurred throughout the first half of 2022, CorrectCare did not announce the data breach until November, 2022, possibly leaving many individuals at risk of fraud without knowing the potential cause. The incident impacted sensitive information including names, dates of birth, inmate numbers, and limited health information, including diagnosis codes, CPT codes, treatment providers, dates of treatment, and, for some individuals, Social Security numbers. The data breach exposed approximately 443,093 individuals.

Shub & Johns attorney, Benjamin F. Johns, filed a class action lawsuit against CorrectCare on December 7, 2022 in the United States Court for the Eastern District of Kentucky. On March 24, 2023, Shub & Johns, along with co-counsel, filed a Consolidated Amended Complaint after the Kentucky court granted the Plaintiff’s motion to consolidate all actions against CorrectCare concerning the data breach on February 22, 2023. Benjamin F. Johns was appointed as Interim Co-Lead Counsel via the same Consolidation Order from the Court.

Preliminary Approval of the CorrectCare Settlement

On March 22, 2024, Plaintiffs in the consolidated CorrectCare data breach litigation filed a motion for preliminary approval for a class action Settlement totaling $6.49 million. Parties in the case await for the Court’s ruling on Plaintiffs Motion for Preliminary Approval. More information concerning the settlement is yet to come.

The case is In re CorrectCare Data Breach Litigation, No. 5:2022-cv-00319.

CorrectCare Data Breach Intake Form

Have you been affected?
Let us know!