CALIFORNIAPhysicalHealthcareHealthcareTheftCustomer Data InvolvedHealth (basic)Identity (basic)MediumResolved

Loma Linda University School of Dentistry

bd_3a685b284f8daa6f · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 11, 2010

To disclose

—

Affected

10,100

Confidence

97%

Full breach record for Loma Linda University School of Dentistry →

Loma Linda University School of Dentistry (Redlands Periodontal Group) reported to HHS OCR on 2010-08-11 a theft of three password-protected desktop computers and an auxiliary hard drive containing ePHI. The breach affected 10,100 individuals whose demographic information was stored on the devices. The CE notified HHS, affected individuals, and the media. Remediation included replacing local-storage computers with diskless workstations, issuing remote credentials, deactivating network access at the facility, and retraining staff on HIPAA policies. OCR obtained assurances of corrective action.

J jump to incidentP pin to compareR raw source

HIPAA clock✓ HHS notified

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.

Incident timeline — partial

? — ?

Breach window unknown

Aug 11, 2010

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed10,100 affectedView incident

Name: Loma Linda University School of Dentistry
norm: loma linda university school of dentistry
Industry: Health Care Services

Name: Loma Linda University School of Dentistry
norm: loma linda university school of dentistry
Industry: Health Care Services
Industry: Healthcaresource default

Discovered: Not extracted — the OCR public portal omits it
Materiality determined: —
Notification sent: —
Affected individuals: 10,100nationwide
Data types: Health (basic)Identity (basic)
HHS breach type: Theft
Where the data lived: Desktop computer
Covered-entity type: Healthcare provider
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: HHS OCR obtained assurances that the covered entity implemented corrective actions

During the incident: Conducted on-site audit of the periodontal clinic
Conducted risk assessment of 16 clinics under the School of Dentistry
Replaced clinic computers with thin-client devices lacking local hard drive storage
Issued remote access credentials
Relocated paper patient charts
Deactivated access to network resources from the periodontal facility
Decommissioned associated equipment and networks
Disposed of computing equipment used at the periodontal facility
Retrained staff on HIPAA policies and procedures
Changes made: Replaced desktop computers with diskless workstations
Issued remote access credentials to replace local storage
Deactivated network access at affected facility
Staff HIPAA retraining completed
Source: Quoted from the filing itself, not independently verified.

Compliance flags: HHS notified
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: not extracted
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: not extracted → Notified: not extracted	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Aug 11, 2010
Raw hash: 709de48d4f361501bda0d8f297296340c7ec7ae7e30f47149180a98a75bbd858

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html2.1 KB

Download View at source

Reporting entityLoma Linda University School of Dentistry

Victim entityLoma Linda University School of Dentistry

IncidentUnauthorized Access

Stated responseConducted on-site audit of the periodontal clinic

ComplianceHHS notified

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing