DisclosureLens
NEW YORKHackingHealthcareHealthcareBusiness Associate (HIPAA)Customer Data InvolvedData ExfiltratedPHIHealth (basic)Identity (basic)Financial accountMediumContained

Laboratory of Dermatopathology

bd_07d3acd0d893cf30 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 25, 2019

To disclose

—

Affected

4,082

Confidence

68%
Full breach record for Laboratory of Dermatopathology →

Laboratory of Dermatopathology reported to HHS on 2019-07-25 a Hacking/IT Incident affecting 4082 individuals. Breached information located on Network Server. The breach involved a business associate, Retrieval-Masters Creditors Bureau, Inc., which was the victim of a cyber-attack exposing ePHI including names, addresses, phone numbers, dates of service, birthdates, clinical information, and financial information. The CE notified HHS, affected individuals, and the media, and implemented additional administrative safeguards following an OCR investigation.

HIPAA clock✓ HHS notified
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.

Incident timeline — partial

? — ?

Breach window unknown

Jul 25, 2019

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Part of Retrieval-Masters Creditors Bureau, Inc supply-chain incident (2019) — a supply-chain cascade affecting multiple organizations.View cascade →
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4,082 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.