PUERTO RICOMisuseHealthcareHealthcarePrivilege AbuseBusiness Associate (HIPAA)Customer Data InvolvedData ExfiltratedHealth (basic)Identity (basic)Government IDHighResolved

Triple-S Salud, Inc.

bd_095d105480c2e800 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 14, 2014

Filed

Jul 18, 2014

To disclose

26 weeks

Affected

7,911

Confidence

50%

Full breach record for Triple-S Salud, Inc. →7 incidents on file

Administracion de Seguros de Salud - Triple S Salud Inc (BA) reported to HHS on 2014-07-18 a breach involving unauthorized access/disclosure affecting 7,911 individuals. The incident occurred when a former employee of a business associate copied patient enrollment information onto a portable disk and downloaded it to a personal computer. The breached data included names, dates of birth, addresses, Social Security numbers, and health insurance claim numbers.

J jump to incidentP pin to compareR raw source

HIPAA clock✗ HHS report late26 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 26 weeks / 185 days

Jan 14, 2014

Discovered

Jul 18, 2014

Filed

vs. sector median

+15 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed7,911 affectedView incident

Name: Triple-S Salud, Inc.
norm: triple s salud
Domain: salud.grupotriples.com
Industry: Insurance — Health

Name: Triple-S Salud, Inc.
norm: triple s salud
Domain: salud.grupotriples.com
Industry: Insurance — Health
Industry: Healthcaresource default

Discovered: Jan 14, 2014
Materiality determined: —
Notification sent: —
Affected individuals: 7,911nationwide
Data types: Health (basic)Identity (basic)Government ID
HHS breach type: Unauthorized access or disclosure
Where the data lived: Portable electronic device
Covered-entity type: Health plan
Attack vector: Unauthorized Access
Threat actor: Partner

Changes made: Committed to conduct a risk analysis
Implement a risk management plan
Revise its policies and procedures
Re-train staff
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(185 days from discovery to filing)
Compliance flags: HHS report lateHHS notified
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: Jan 14, 2014
→ Notified: not extracted
— 60 days HHS report late
HIPAA
Discovered: Jan 14, 2014
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: Jan 14, 2014 → Notified: not extracted	—	60 days	HHS report late
HIPAA	Discovered: Jan 14, 2014 → Notified: not extracted	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Jul 18, 2014
Raw hash: 97d81c90fb0acb8619ed29b251aab3883db095451d9671e89aed386f6cf1ff49

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html2.1 KB

Download View at source

Reporting entityTriple-S Salud, Inc.

Victim entityTriple-S Salud, Inc.

Incidentdiscovered Jan 14, 2014

Stated responseCommitted to conduct a risk analysis

ComplianceHHS report late

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing