DELAWAREMisuseHealthcareHealthcarePrivilege AbuseBusiness Associate (HIPAA)Customer Data InvolvedData ExfiltratedPHIHealth (basic)Identity (basic)Government IDHighResolved

Ambucor Health Solutions

bd_04d40a90d823a380 · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 17, 2016

Filed

Jul 22, 2016

To disclose

18 weeks

Affected

53,000

Confidence

66%

Full breach record for Ambucor Health Solutions →

Ambucor Health Solutions reported to HHS on 2016-07-22 a Unauthorized Access/Disclosure affecting 53,000 individuals. A rogue employee downloaded PHI onto a portable drive. Breached information located on Email, Other Portable Electronic Device.

J jump to incidentP pin to compareR raw source

HIPAA clock✗ HHS report late18 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 18 weeks / 127 days

Mar 17, 2016

Begins

Mar 17, 2016

Discovered

Jul 22, 2016

Filed

vs. sector median

+7 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed53,000 affectedView incident

Name: Ambucor Health Solutions
norm: ambucor health
Industry: Health Care Services

Name: Ambucor Health Solutions
norm: ambucor health
Industry: Health Care Services
Industry: Healthcaresource default

Discovered: Mar 17, 2016
Breach occurred: Mar 17, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 53,000nationwide
Data types: PHIHealth (basic)Identity (basic)Government ID
HHS breach type: Unauthorized access or disclosure
Where the data lived: EmailPortable electronic device
Covered-entity type: Business associate
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1052 Exfiltration Over Physical Medium
Threat actor: InternalFinancial
Regulator citations: Notified HHSOCR obtained assurances that the BA implemented the corrective actions listed
Initial access: insider_action

During the incident: Shut off the employee's computer access
Conducted a thorough investigation
Provided breach notification to HHS and its 53 customers
Offered identity protection services to all affected individuals at no cost
Provided a call center to respond to questions and concerns
Changes made: Re-ran background checks on all of its management team
Performed a comprehensive enterprise-wide risk assessment
Reconfigured the universal serial bus (USB) ports on its computer workstations to allow read-only access
Enhanced its related policies and procedures
Provided additional HIPAA training to all employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(127 days from discovery to filing)
Compliance flags: HHS report lateHHS notified
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: Mar 17, 2016
→ Notified: not extracted
— 60 days HHS report late
HIPAA
Discovered: Mar 17, 2016
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: Mar 17, 2016 → Notified: not extracted	—	60 days	HHS report late
HIPAA	Discovered: Mar 17, 2016 → Notified: not extracted	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Jul 22, 2016
Raw hash: b0262d265ce974de933f683daae0296e40895cb999d2d7e881b48106bc883c14

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html3.0 KB

Download View at source

Reporting entityAmbucor Health Solutions

Victim entityAmbucor Health Solutions

Incidentdiscovered Mar 17, 2016

Stated responseShut off the employee's computer access

ComplianceHHS report late

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing