AccidentalHealthcareHealthcareDisposal ErrorCustomer Data InvolvedEmployee Data InvolvedPHIGovernment IDIdentity (basic)Health (basic)Financial accountMediumResolved

Eureka Internal Medicine

bd_3a2f3c5b96c72931 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 9, 2013

Filed

Mar 4, 2014

To disclose

21 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

66%

Full breach record for Eureka Internal Medicine →

Eureka Internal Medicine disclosed that a janitorial service improperly mixed paper recycling containing patient information with regular trash from September 25, 2013, to October 9, 2013. The incident involved potential exposure of PHI, including names, SSNs, insurance info, and medical records. The issue was discovered on October 9, 2013. Staff were retrained on proper disposal procedures.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 14 days

discovery → filing · 21 weeks / 146 days

Sep 25, 2013

Begins

Oct 9, 2013

Discovered

Mar 4, 2014

Filed

vs. sector median

+8 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_064305a82c15de752014-03-04Candidate

Name: Eureka Internal Medicine
norm: eureka internal medicine
Domain: szs.com

Name: Eureka Internal Medicine
norm: eureka internal medicine
Industry: Healthcarellm

Discovered: Oct 9, 2013
Breach occurred: Sep 25, 2013 – Oct 9, 2013
Undetected for: 14 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PHIGovernment IDIdentity (basic)Health (basic)Financial account
Data elements: Social Security numberMedical information
Attack vector: Unknown
Third party: via Janitorial service

During the incident: Instructed office and janitorial staff on proper procedures and safeguards to prevent a recurrence
Changes made: Instructed office and janitorial staff on proper procedures and safeguards to prevent a recurrence
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(146 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

HHS OCRMar 4 · first

California State AGMar 4 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-44320
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 4, 2014
Raw hash: 4eab54f093e61d70be5296d50128d8c0717990ee7dfdbbe9c688c1ae506eae1c

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityEureka Internal Medicine

Victim entityEureka Internal Medicine

Incidentdiscovered Oct 9, 2013

Stated responseInstructed office and janitorial staff on proper procedures and safeguards to prevent a recurrence

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov