MisuseHealthcareHealthcarePrivilege AbuseDelayed DiscoveryEmployee Data InvolvedIdentity (basic)Health (basic)PHILowResolved

Cabell Huntington Hospital, Inc.

bd_0180eda71ae0f8c9 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 25, 2019

Filed

Nov 24, 2021

To disclose

33 months

Affected

3state residents only

Linked

3 filings

Confidence

66%

Full breach record for Cabell Huntington Hospital, Inc. →

Huntington Hospital notified Washington AG of unauthorized access to patient records by a former employee between Oct 2018 and Feb 2019. 3 WA residents affected. Data included PHI and demographic info. Employee terminated, law enforcement notified. Notifications sent Nov 2021.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d33 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 147 days

discovery → filing · 33 months / 1003 days

Oct 1, 2018

Begins

Feb 25, 2019

Discovered

Nov 24, 2021

Filed

vs. sector median

+131 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_122e169285be5f3c2021-11-24Verified
HHS OCRbd_b4d807eabf357e7e2021-11-24Verified

Name: Cabell Huntington Hospital, Inc.
norm: cabell huntington hospital

Name: Cabell Huntington Hospital, Inc.
norm: cabell huntington hospital
Industry: Healthcarellm

Discovered: Feb 25, 2019
Breach occurred: Oct 1, 2018 – Feb 25, 2019
Undetected for: 147 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 24, 2021
Affected individuals: 3state-resident count only
Data types: Identity (basic)Health (basic)PHI
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: notified law enforcement of the incident and cooperated fully with its investigationThe law enforcement investigation resulted in the former employee being charged with a criminal HIPAA violation by the federal government
Initial access: insider_action

During the incident: Deactivated the employee's access to our electronic medical record systems
The employee was subsequently terminated
Notified law enforcement of the incident and cooperated fully with its investigation
Implementing additional security tools to monitor access to our medical record applications
Expanded both its technology monitoring capabilities and employee training on safeguarding and accessing patient records
Reviewed and revised our policies and procedures governing those audits
Changes made: Implementing additional security tools to monitor access to our medical record applications
Expanded both its technology monitoring capabilities and employee training on safeguarding and accessing patient records
Reviewed and revised our policies and procedures governing those audits
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 33 months(1003 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGNov 24 · first

HHS OCRNov 24 · first

Washington State AGNov 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM11280.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 24, 2021
Raw hash: 6f4eab8d23b5c26124993d83120df0c6c1d205e2358b891c6b76dec4586b1e40

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCabell Huntington Hospital, Inc.

Victim entityCabell Huntington Hospital, Inc.

Incidentdiscovered Feb 25, 2019

Stated responseDeactivated the employee's access to our electronic medical record systems

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com