OHHackingHealthcareHealthcareCustomer Data InvolvedHEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighResolved

UC Health, LLC

bd_32f8efab7b8f0333 · schema v1 · pii pii-v1

Full breach record for UC Health, LLC →

UC Health, LLC (OH) reported to HHS OCR on 2015-11-14 an Unauthorized Access/Disclosure breach affecting 1,064 individuals. Discovered on September 16, 2015, after a malware alert flagged the spoofed domain 'uchelath.com' mimicking the legitimate 'uchealth.com'. Exposed ePHI included names, addresses, phone numbers, medical record numbers, diagnoses, procedures, dates, birthdates, account numbers, and one SSN. Breached information was located in Email. CE blocked suspicious domain traffic, notified HHS, affected individuals, media, and the FBI. OCR obtained documented assurances of corrective actions.

HIPAA clock✓ HHS notified8 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,064 affectedView incident

Source provenance

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Nov 14, 2015
Raw hash: 26e07a85ea3bc8f95eadd448c59e80907d16d96c5f8f28217158ae41bfad30de

Source filing

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html2.0 KB

Download View at source

Reporting entity

Name: UC Health, LLC
norm: uc health
Domain: uchealth.com
Industry: Health Care Services

Victim entity

Name: UC Health, LLC
norm: uc health
Domain: uchealth.com
Industry: Health Care Services
Industry: Healthcaresource default

Incident

Discovered: Sep 16, 2015
Materiality determined: —
Notification sent: —
Affected individuals: 1,064
Data types: HEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1566 Phishing
Threat actor: External
Regulator citations: Notified HHS OCROCR obtained documented assurances of corrective actionFBI contacted regarding the breach
Initial access: phishing_link

Compliance

Time to disclose: 8 weeks(59 days from discovery to filing)
Compliance flags: HHS notified
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: Sep 16, 2015
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: Sep 16, 2015 → Notified: not extracted	—	regulatory submission	HHS notified

Extraction provenance

Status: No extraction artifact recorded for this disclosure.