Consultants in Neurological Surgery, LLP
bd_3bebcbc1d1476796 · schema v1 · pii pii-v1
Full breach record for Consultants in Neurological Surgery, LLP →Consultants in Neurological Surgery, LLP (FL) reported to HHS on 2016-11-08 an Unauthorized Access/Disclosure affecting 800 individuals. Breached information located on Paper/Films. An employee was discovered on September 9, 2016 to have stolen patients' credit card information for personal use while processing co-payments, also accessing demographic and clinical information. The employee was terminated, and the CE revised policies, retrained staff, and limited data in its practice management software. OCR provided technical assistance and obtained assurances of corrective action.
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Nov 8, 2016
- Raw hash
- db350d98e42c3c764cd9f995dd51c4d2466c8cc51a2a0d926331191fd6a1b86d
Source filing
Reporting entity
- Name
- Consultants in Neurological Surgery, LLPnorm: consultants in neurological surgery
- Industry
- Health Care Services
Victim entity
- Name
- Consultants in Neurological Surgery, LLPnorm: consultants in neurological surgery
- Industry
- Health Care Services
- Industry
- Healthcaresource default
Incident
- Discovered
- Sep 9, 2016
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 800
- Data types
- IDENTITY_BASICHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- InternalFinancial
- Regulator citations
- OCR provided technical assistance regarding the Breach Notification Rule and the Security RuleOCR obtained assurances that the CE implemented corrective actions
- Initial access
- insider_action
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- HHS notified
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: Sep 9, 2016→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.