SOUTH CAROLINAAccidentalHealthcareHealthcareGaffeCustomer Data InvolvedDelayed DiscoveryHealth (basic)Identity (basic)Government IDMediumResolved

Heritage Medical Partners, LLC

bd_11ac14f3371eb9bd · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 15, 2016

To disclose

—

Affected

812

Confidence

96%

Full breach record for Heritage Medical Partners, LLC →

Heritage Medical Partners, LLC (SC) reported to HHS OCR on 2016-09-15 an Unauthorized Access/Disclosure affecting 812 individuals. While relocating to a new facility, the CE left medical records unsecured in the former facility from November 17, 2014 to January 22, 2015. PHI exposed included names, dates of birth, addresses, phone numbers, SSNs, clinical information, and other demographics on paper/film records. The CE was dissolving and stopped treating patients in December 2015. OCR provided technical assistance and obtained corrective action assurances.

J jump to incidentP pin to compareR raw source

HIPAA clock✓ HHS notified

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.

Incident timeline

Nov 17, 2014

Begins

Sep 15, 2016

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed812 affectedView incident

Name: Heritage Medical Partners, LLC
norm: heritage medical
Industry: Health Care Services

Name: Heritage Medical Partners, LLC
norm: heritage medical
Industry: Health Care Services
Industry: Healthcaresource default

Discovered: Not extracted — the OCR public portal omits it
Breach occurred: Nov 17, 2014 – Jan 22, 2015
Materiality determined: —
Notification sent: —
Affected individuals: 812nationwide
Data types: Health (basic)Identity (basic)Government ID
HHS breach type: Unauthorized access or disclosure
Where the data lived: Paper / films
Covered-entity type: Healthcare provider
Attack vector: Unauthorized Access
Threat actor: Internal
Regulator citations: HHS OCR provided technical assistance; OCR obtained assurances that corrective actions were implemented.

During the incident: Breach notification provided to HHS, affected individuals, media, and on a CE-operated website.
Medical records moved to secure areas of individual providers' current facilities with access limited to authorized employees.
OCR provided technical assistance regarding proper retention and destruction of PHI.
Changes made: Records secured in new facilities with access controls.
Corrective action plan implemented per OCR assurances.
Source: Quoted from the filing itself, not independently verified.

Compliance flags: HHS notified
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: not extracted
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: not extracted → Notified: not extracted	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Sep 15, 2016
Raw hash: e81281ede140117a7703b80739341c28670c9a610260e477a953d9adab1b1c03

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html2.0 KB

Download View at source

Reporting entityHeritage Medical Partners, LLC

Victim entityHeritage Medical Partners, LLC

IncidentUnauthorized Access

Stated responseBreach notification provided to HHS, affected individuals, media, and on a CE-operated website.

ComplianceHHS notified

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing