FLORIDAHackingHealthcareGovernmentHealthcareCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDHealth (basic)CriticalContained

Florida Department of Health

bd_0934a20d9e7a482a · schema v1 · pii pii-v1

Severity

Critical

Discovered

—

Filed

Aug 23, 2024

To disclose

—

Affected

729,699

Linked

2 records

Confidence

95%

Full breach record for Florida Department of Health →4 incidents on file

Florida Department of Health reported to HHS on 2024-08-23 a Hacking/IT Incident affecting 729,699 individuals. Breached information was located on a Network Server. PHI involved included names, addresses, dates of birth, diagnoses, conditions, claims information, and Social Security numbers. The CE notified HHS, affected individuals, the media, and provided substitute notice on its website. Additional administrative, technical, and security safeguards were implemented in response.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.

Incident timeline — partial

? — ?

Breach window unknown

Aug 23, 2024

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 2 records about the same incident.View merged incident

A leak claim by ransomhub about this victim was first seen 52 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteransomhubbd_5896952c7be665432024-06-28 · +56dVerified

Name: Florida Department of Health
norm: florida department of health
Domain: floridahealth.gov
Industry: Health Care Services

Name: Florida Department of Health
norm: florida department of health
Domain: floridahealth.gov
Industry: Health Care Services
Industry: Healthcaresource defaultGovernmentllm

Discovered: Not extracted — the OCR public portal omits it
Materiality determined: —
Notification sent: —
Affected individuals: 729,699nationwide
Data types: Identity (basic)Government IDHealth (basic)
HHS breach type: Hacking / IT incident
Where the data lived: Network server
Covered-entity type: Healthcare provider
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: HHS OCR notified

During the incident: Notified HHS
Notified affected individuals
Notified media
Provided substitute notice on website
Changes made: Implemented additional administrative safeguards
Implemented additional technical safeguards
Implemented additional security safeguards
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30dHHS notified
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: not extracted
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: not extracted → Notified: not extracted	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Aug 23, 2024
Raw hash: 6e15f01b803cd0132a67456fa313a3aad4c8145915cb00a76efbf79f0f905ef6

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html1.5 KB

Download View at source

Linked disclosures

Ransomware claims (1)

Reporting entityFlorida Department of Health

Victim entityFlorida Department of Health

IncidentUnauthorized Access

Stated responseNotified HHS

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing