Carolina Oncology Specialists
bd_09ec89108f91c738 · schema v1 · pii pii-v1
Full breach record for Carolina Oncology Specialists →Carolina Oncology Specialists (NC) reported to HHS on 2017-10-16 an Unauthorized Access/Disclosure affecting 1,551 individuals. Breached information located on Electronic Medical Record. A former employee with legitimate access to patient files used that access to misappropriate patient PHI — including names, addresses, birthdates, SSNs, and some medical information — to open fraudulent credit card accounts. The breach was discovered after credit card companies contacted the CE and a patient reported a suspicious transaction. Police were notified; the former employee was identified as the prime suspect. The CE implemented enhanced network monitoring and granular PHI access controls.
J jump to incidentP pin to compareR raw source
Incident timeline
Aug 11, 2017
Begins
Sep 6, 2017
Discovered
Oct 16, 2017
Filed
vs. sector median
6 wks faster
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.