DisclosureLens
AccidentalHealthcareHealthcareMisdeliveryCustomer Data InvolvedPHIHealth (basic)Identity (basic)LowResolved

Concord Orthopaedics

bd_3ebabf9a8b1dfccb · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 1, 2018

Filed

Mar 13, 2018

To disclose

12 days

Affected

2

Confidence

66%
Full breach record for Concord Orthopaedics →2 incidents on file

Concord Orthopaedics notified the NH Attorney General of an inadvertent email misdelivery on March 1, 2018. An employee unintentionally forwarded an email string containing personal medical information (appointment details) for two New Hampshire residents to an outside attorney instead of an internal staff member. The attorney deleted the email within an hour. Affected individuals were notified by phone on March 12, 2018, and by mail on March 16, 2018.

Incident timeline

discovery → filing · 12 days

Mar 1, 2018

Begins

Mar 1, 2018

Discovered

Mar 13, 2018

Filed

vs. sector median

9 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.