Louisiana Department of Public Safety and Corrections

Your Personal Info Could Be

Exposed Online After

This Hospital Breach

Breach Description

The Louisiana Department of Public Safety and Corrections experienced a significant data breach due to a cybersecurity incident at CorrectCare, a third-party health administrator. This breach, discovered on July 6, 2022, led to the exposure of personal health information (PHI) of approximately 85,466 inmates who received offsite medical care between January 2013 and July 2022. The exposed data included names, dates of birth, Social Security numbers, DOC IDs, and diagnosis codes. CorrectCare responded by securing the server within nine hours of discovering the breach and engaged a third-party cybersecurity firm to investigate the incident’s nature and scope. The Louisiana Department of Public Safety and Corrections is working with CorrectCare to implement additional safeguards for PHI[23].

Data breaches, in general, are security incidents where unauthorized individuals gain access to confidential information, potentially leading to various consequences such as financial losses, reputational damage, legal penalties, and long-term impacts on individuals and organizations[18][19][22][25]. Preventative measures include implementing robust security protocols, regular software updates, data encryption, and employee training on recognizing and responding to phishing attempts[22][25].

Citations:

  1. https://doc.louisiana.gov/data-breach-louisiana-doc/
  2. https://www.ibm.com/topics/data-breach
  3. https://hbr.org/2023/05/the-devastating-business-impacts-of-a-cyber-breach
  4. https://www.ekransystem.com/en/blog/data-breach-investigation-best-practices
  5. https://nextsteps.la.gov/substitute-notice/
  6. https://www.trendmicro.com/vinfo/us/security/definition/data-breach
  7. https://www.cloudmask.com/blog/data-breaches-threats-and-consequences
  8. https://www.wafb.com/2023/07/21/la-omv-offers-free-credit-monitoring-identify-theft-protection-after-cyber-breach/
  9. https://usa.kaspersky.com/resource-center/definitions/data-breach
  10. https://bigid.com/blog/the-costly-impact-of-a-data-breach-on-individuals/
  11. https://www.hammondstar.com/news/office-of-motor-vehicles-addresses-data-breach/article_70aaf5ae-074b-5123-ae0f-f167d8239845.html
  12. https://www.fortinet.com/resources/cyberglossary/data-breach
  13. https://www.nedigital.com/en/blog/data-breach-consequences
  14. https://mykisscountry937.com/louisiana-omv-security-breach/
  15. https://www.ftc.gov/business-guidance/resources/data-breach-response-guide-business
  16. https://www.fisglobal.com/en/insights/merchant-solutions-worldpay/article/how-the-consequences-of-a-data-breach-threaten-small-businesses
  17. https://www.wwltv.com/article/news/local/louisiana-dps-suffers-data-breach-exposing-health-info-80000-inmates/289-2ac6abda-0d14-4dc7-8669-dcdaea7a0bca
  18. https://www.forbes.com/advisor/business/what-is-data-breach/
  19. https://securityintelligence.com/articles/long-term-impacts-security-breach/
  20. https://www.justice.gov/opa/pr/justice-department-finds-louisiana-department-public-safety-and-corrections-violates
  21. https://commission.europa.eu/law/law-topic/data-protection/reform/rules-business-and-organisations/obligations/what-data-breach-and-what-do-we-have-do-case-data-breach_en
  22. https://www.theamegroup.com/security-breach/
  23. https://healthitsecurity.com/news/louisiana-corrections-department-suffers-third-party-data-breach-85k-impacted
  24. https://www.cloudflare.com/learning/security/what-is-a-data-breach/
  25. https://www.securitymagazine.com/articles/98325-the-impact-of-a-data-breach
Breach Submission Date Oct 31, 2022
Converted Entity Name Louisiana Department of Public Safety and Corrections
Converted Entity Type Healthcare Provider
State LA
Individuals Affected 85,466
Breach Type Unauthorized Access/Disclosure

Breach Information Location Network Server

Business Associate Present Yes