CorrectHealth (“CH”) experienced a data security incident that resulted in unauthorized access to some individuals’ sensitive personal information. The accessed information included name, address, Social Security number, Driver’s License number, passport number, financial account information, and/or limited medical information. CH moved quickly to investigate the incident and secured its network and also offered credit monitoring and identity theft protection services for all potentially affected individuals.

The Maine Office of the Attorney General reported a data breach involving CorrectHealth on August 25, 2022. The incident, discovered on November 10, 2021, involved unauthorized access to employee email accounts, potentially affecting the Social Security numbers of 54,066 individuals, with 3 Maine residents specifically impacted. Identity theft protection services were offered for 12 months through IDX.