NDAccidentalHealthcareFinancial ServicesHealthcareDisposal ErrorCustomer Data InvolvedDelayed DiscoveryHEALTH_BASICIDENTITY_BASICMediumResolved

Elbowoods Memorial Health Center

bd_2c355607c219ceb3 · schema v1 · pii pii-v1

Full breach record for Elbowoods Memorial Health Center →

Elbowoods Memorial Health Center (a Health Plan, ND) reported to HHS OCR on 2013-08-21 an Improper Disposal breach affecting an estimated 10,000 individuals. On or about October 1, 2011, contractors discovered abandoned PHI at the Mandan, Hidatsa, and Arikara Nations' Minne-Tohe facility, including boxes, binders, pharmaceutical bags with printed PHI, and 12 computer towers, 3 mini computers, and a laptop hard drive. An additional binder was found on May 15, 2013. Following OCR investigation, the CE relocated materials, conducted a risk analysis, and developed a risk management plan.

HIPAA clock✓ HHS notified23 months discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed10,000 affectedView incident

Source provenance

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Aug 21, 2013
Raw hash: daa95dfc63c8b34afb2414e87266f5d7c9c93eec2491d3359c6b5e1462d8e143

Source filing

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html2.0 KB

Download View at source

Reporting entity

Name: Elbowoods Memorial Health Center
norm: elbowoods memorial health center
Industry: Insurance — Health

Victim entity

Name: Elbowoods Memorial Health Center
norm: elbowoods memorial health center
Industry: Insurance — Health
Industry: Healthcaresource defaultFinancial Servicesllm

Incident

Discovered: Oct 1, 2011
Materiality determined: —
Notification sent: —
Affected individuals: 10,000
Data types: HEALTH_BASICIDENTITY_BASIC
Attack vector: Misconfiguration
Threat actor: Internal
Regulator citations: OCR investigation conducted; OCR provided substantial technical assistance

Compliance

Time to disclose: 23 months(690 days from discovery to filing)
Compliance flags: HHS notified
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: Oct 1, 2011
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: Oct 1, 2011 → Notified: not extracted	—	regulatory submission	HHS notified

Extraction provenance

Status: No extraction artifact recorded for this disclosure.