Founded by experienced disability experts and named one of the Top Ten Disability Groups in the U.S., our compassionate team understands how to work with the Social Security Administration to get you approved.
Lucent Health is a leading third-party administrator serving the self-insured employer market, with a fully integrated care management solution. Lucent Health is human focused and data driven, with plan administration, patient care programs and cost controls all under one roof. Best-in-class care management and concierge care solutions are delivered through Narus Health, a Lucent Health company. Narus Health care management services create a better healthcare experience for employees while empowering employers to mitigate costs. Our technology platform pulls nightly data to more intelligently deliver compassionate care to members and their families, who are supported by a skilled care team. Follow us on Twitter @lucenthealth. www.lucenthealth.com
Security & Compliance Standards Overview
No incidents recorded for Disability Help Group in 2025.
No incidents recorded for Lucent Health in 2025.
Disability Help Group cyber incidents detection timeline including parent company and subsidiaries
Lucent Health cyber incidents detection timeline including parent company and subsidiaries
Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
A SQL injection vulnerability exists in the langchain-ai/langchain repository, specifically in the LangGraph's SQLite store implementation. The affected version is langgraph-checkpoint-sqlite 2.0.10. The vulnerability arises from improper handling of filter operators ($eq, $ne, $gt, $lt, $gte, $lte) where direct string concatenation is used without proper parameterization. This allows attackers to inject arbitrary SQL, leading to unauthorized access to all documents, data exfiltration of sensitive fields such as passwords and API keys, and a complete bypass of application-level security filters.
