CorVel 'Ransomware' Attack Still Under Investigation; Systems 'Reaching' Full Capacity

Irvine, CA (WorkersCompensation.com) – “CorVel experienced a ransomware event that forced us to take a number of systems offline,” said Melissa Storan, CorVel’s director of Marketing. “We are pleased to report that our business systems are reaching full capacity and communications methods have been fully restored.”

The latest comment comes more than two weeks after CorVel was forced to shut down its systems due to the attack. Forensic experts were called in to assist in the response.

“The forensic investigation to date has not uncovered information indicating that any customer data was exfiltrated or impacted,” Storan continued. “Though our ability to process claims and communicate with customers through traditional channels was briefly affected, our teams have worked around the clock to clear those backlogs and ensure we are able to provide the level of service our customers are accustomed to.”

As to who or what exactly caused the cyber attack is still unclear. Nor has it been revealed what, if any ransom has been paid, or the full impact on CorVel’s systems and customers.

“Ransomware attacks occur when malicious software effectively holds a computer system hostage, typically by encrypting all of the system’s data, until a ransom is paid,” explained Alaska National Insurance in a statement on its website. “Encryption changes data into another form, or code, so that only people with access to a secret key or password can read it.”

CorVel provides medical care management services to Alaska National, and adjusting work on the insurer’s claims in several states outside of Alaska.

Share This Article: