Overview
The misdirected email was identified January 15, 2026 and is not described as a cyberattack. The recipient was asked to delete it. No count is given.
Timeline
- Occurred
- Discovered
- Disclosed
Misdirected disclosure identified.
Organization response
Per the notice, the organisation investigated and contained the incident, notified individuals and described monitoring or protective resources.
What you can do
Verify notices through official channels, avoid links or attachments in unexpected messages, and do not provide credentials or account details.
Sources
- CorVel notice of data breachOffice of the Vermont Attorney General · 2026-11-09