Important Information on Data Breach

The Department of Public Safety and Corrections has been alerted about a cybersecurity incident at a third-party health administrator that resulted in the exposure of the personal health information of approximately 80,000 state and pre-trial inmates who received off-site medical care over a nine year period (Jan. 1, 2013 – July 7, 2022). The Department takes this very seriously, and is providing the following information on the breach and what to do if you may have been affected. 

Information and Steps You Can Take

The Louisiana Department of Public Safety and Corrections announced on November 1, 2022, that a cybersecurity incident at a third-party health administrator under contract to process medical claims led to the exposure of personal health information (PHI) of certain members of their incarcerated population. The exposure of two file directories on a single server operated by CorrectCare (the Company) was discovered on July 6, 2022, and impacted approximately 80,000 pretrial and DOC inmates who were incarcerated and received offsite medical care between January 1, 2013, and July 7, 2022. DPS&C contracts with CorrectCare to process medical claims for state and pretrial inmates who receive offsite non-primary and emergency medical care. This is separate and apart from the Department’s onsite medical care and electronic health records (EHR), which are managed by the Department and are not part of this breach.

Who is potentially affected?

The exposure of two file directories on a single server operated by CorrectCare (the Company) was discovered on July 6, 2022, and impacted approximately 80,000 pretrial and DOC inmates who were incarcerated and received offsite medical care for a period of nine years between January 1, 2013, and July 7, 2022. The Department of Public Safety & Corrections contracts with CorrectCare to process medical claims for state and pretrial inmates who receive offsite non-primary and emergency medical care.

Who is not affected?

The Department’s electronic health record (EHR), which is managed by the Department of Corrections and documents of all onsite medical care provided at the institutions was not affected and is not part of this breach.

The Department of Public Safety & Corrections takes the privacy and security of those under its care very seriously and understands that protecting their information is essential. The Department will continue to work with CorrectCare and other partners to safeguard against future exposure of Public Health Information.

Click below for more information about the data exposure as well as information on steps you should take if you believe your information may have been affected by this data breach.

For more information about the data exposure, click here:

Learn More

For information on what you should do if you may have been affected, click here:

Learn More

To view the press release click here:

Learn More

Enroll in Credit Monitoring

Enroll in Credit Monitoring
To help protect your identity, CorrectCare is offering a complimentary 12-month membership of
Experian’s IdentityWorks. This product provides you with superior identity detection and resolution
of identity theft. To activate your membership and start monitoring your personal information, please
follow the steps below:

  • Ensure that you enroll by February 28, 2023 (Your code will not work after this date.)
  • Visit the Experian IdentityWorks website to enroll: https://experianidworks.com/plus
  • Provide your activation code: YJWF423PWCIf you have questions about the product, need assistance with Identity Restoration that arose as a result
    of this incident, or would like an alternative to enrolling in Experian IdentityWorks online, please contact
    Experian’s customer care team at (844) 700-1314 by February 28, 2023. Be prepared to provide
    engagement number B079693 as proof of eligibility for the Identity Restoration services by Experian.