DisclosureLens
NORTH CAROLINAAccidentalHealthcareHealthcarePublishing ErrorCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountHealth (basic)MediumResolved

Vidant Health

bd_04c1f463bc0b629a · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 10, 2016

To disclose

—

Affected

897

Confidence

97%
Full breach record for Vidant Health →2 incidents on file

Vidant Health (NC Healthcare Provider) reported to HHS on 2016-03-10 an Unauthorized Access/Disclosure affecting 897 individuals. From December 1, 2007 through March 9, 2016, the CE inadvertently included unnecessary PHI in bankruptcy court filings. Exposed data included billing account numbers, SSNs, medical record numbers, dates of birth, phone numbers, sex, marital status, names, service dates, and account balances. The CE redacted filings, filed protective orders, sealed proofs of claims, retrained staff, and provided one year of identity theft protection. OCR obtained corrective action assurances.

HIPAA clock✓ HHS notified
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.

Incident timeline

Dec 1, 2007

Begins

Mar 10, 2016

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed897 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.