PhysicalHealthcareHealthcareTheftCustomer Data InvolvedPHIHealth (basic)Identity (basic)LowContained

Hankyu Chung, M.D.

bd_037b2cd09bf33f9a · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 17, 2013

Filed

Sep 6, 2013

To disclose

12 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Hankyu Chung, M.D. →

Hankyu Chung, M.D. notified patients of a privacy breach resulting from a burglary at its San Jose office on June 16, 2013. Two laptops were stolen; one contained unencrypted patient names, dates of birth, and significant medical records including diagnoses and medication information. Social Security numbers and addresses were not present. The incident was reported to the San Jose Police Department. The organization increased security and implemented new procedures to prevent future breaches.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jun 17, 2013 → Notified Jul 17, 201330d ✓ CA 60-day OK12 weeks discovery → filing

Incident timeline

undetected · 1 days

discovery → filing · 12 weeks / 81 days

Jun 16, 2013

Begins

Jun 17, 2013

Discovered

Sep 6, 2013

Filed

vs. sector median

1 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_848c16f7e779afa42013-09-06Verified by operator

Name: Hankyu Chung, M.D.
norm: hankyu chung md

Name: Hankyu Chung, M.D.
norm: hankyu chung md
Industry: Healthcarellm

Discovered: Jun 17, 2013
Breach occurred: Jun 16, 2013 – Jun 16, 2013
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jul 17, 2013
Affected individuals: Not disclosed
Data types: PHIHealth (basic)Identity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External

During the incident: Reported the burglary to the San Jose Police Department
Conducted a preliminary review of the sensitivity of the information involved
Sent notification letters to affected patients
Changes made: Increased security
Implemented procedures to minimize the possibility of future breaches
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(81 days from discovery to filing)
Compliance flags: CA 60-day OK · 30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jun 17, 2013
→ Notified: Jul 17, 2013
30d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jun 17, 2013 → Notified: Jul 17, 2013	30d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

HHS OCRSep 6 · first

California State AGSep 6 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-42619
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 6, 2013
Raw hash: 7a7fdc15fea8cabcab45c1a876464ea6f121cbe7f0be6074656850a922ff64e5

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityHankyu Chung, M.D.

Victim entityHankyu Chung, M.D.

Incidentdiscovered Jun 17, 2013

Stated responseReported the burglary to the San Jose Police Department

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov