FLORIDAAccidentalHealthcareHealthcareMisdeliveryBusiness Associate (HIPAA)Customer Data InvolvedPHIHealth (basic)Identity (basic)MediumResolved

Integral Health Plan, Inc.

bd_13ce969bbba9ea23 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 15, 2015

Filed

Jul 10, 2015

To disclose

8 weeks

Affected

7,549

Confidence

67%

Full breach record for Integral Health Plan, Inc. →

Integral Health Plan, Inc. reported to HHS on 2015-07-10 a Unauthorized Access/Disclosure affecting 7549 individuals. Breached information located on Paper/Films. The business associate, Independent Living Solutions LLC, sent EOBs containing patient names, DOB, Medicaid IDs, and diagnosis codes to incorrect providers. Corrective actions included BA training and implementing a two-step verification process for mailed materials.

J jump to incidentP pin to compareR raw source

HIPAA clock✓ HHS report on time8 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 8 weeks / 56 days

May 15, 2015

Discovered

Jul 10, 2015

Filed

vs. sector median

1 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed7,549 affectedView incident

Name: Integral Health Plan, Inc.
norm: integral health plan
Industry: Insurance — Health

Name: Integral Health Plan, Inc.
norm: integral health plan
Industry: Healthcaresource default

Discovered: May 15, 2015
Materiality determined: —
Notification sent: —
Affected individuals: 7,549nationwide
Data types: PHIHealth (basic)Identity (basic)
HHS breach type: Unauthorized access or disclosure
Where the data lived: Paper / films
Covered-entity type: Health planBusiness associate involved
Attack vector: Unauthorized Access
MITRE ATT&CK: T1530 Data from Cloud Storage
Threat actor: Internal
Regulator citations: OCR obtained assurances that the CE implemented the corrective actions listed above
Third party: via Independent Living Solutions LLCbusiness associate

During the incident: Provided additional training material to its BA
Provided breach notification to HHS, affected individuals, and the media
Posted notice on its website
Changes made: Revised payment processes to implement a two-step verification process before material is mailed
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(56 days from discovery to filing)
Compliance flags: HHS report on timeHHS notified
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: May 15, 2015
→ Notified: not extracted
— 60 days HHS report on time
HIPAA
Discovered: May 15, 2015
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: May 15, 2015 → Notified: not extracted	—	60 days	HHS report on time
HIPAA	Discovered: May 15, 2015 → Notified: not extracted	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Jul 10, 2015
Raw hash: 82fab393d70146308e8119d0b6bc702897b7eb8b9fdd5e0d2acf578aab3e86be

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html1.8 KB

Download View at source

Reporting entityIntegral Health Plan, Inc.

Victim entityIntegral Health Plan, Inc.

Incidentdiscovered May 15, 2015

Stated responseProvided additional training material to its BA

ComplianceHHS report on time

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing