DisclosureLens
NORTH CAROLINAMisuseHealthcareHealthcarePrivilege AbuseCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDHealth (basic)Financial accountHighResolved

Carolina Oncology Specialists

bd_09ec89108f91c738 · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 6, 2017

Filed

Oct 16, 2017

To disclose

6 weeks

Affected

1,551

Confidence

96%
Full breach record for Carolina Oncology Specialists →

Carolina Oncology Specialists (NC) reported to HHS on 2017-10-16 an Unauthorized Access/Disclosure affecting 1,551 individuals. Breached information located on Electronic Medical Record. A former employee with legitimate access to patient files used that access to misappropriate patient PHI — including names, addresses, birthdates, SSNs, and some medical information — to open fraudulent credit card accounts. The breach was discovered after credit card companies contacted the CE and a patient reported a suspicious transaction. Police were notified; the former employee was identified as the prime suspect. The CE implemented enhanced network monitoring and granular PHI access controls.

HIPAA clock✓ HHS report on time6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 26 days
discovery → filing · 6 weeks / 40 days

Aug 11, 2017

Begins

Sep 6, 2017

Discovered

Oct 16, 2017

Filed

vs. sector median

3 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,551 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.