CALIFORNIAAccidentalHealthcareFinancial ServicesHealthcareMisdeliveryCustomer Data InvolvedHealth (basic)Identity (basic)Government IDHighResolved

Laborers Funds Administrative Office of Northern California, Inc.

bd_411fda9e3b80d34c · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 17, 2016

Filed

Mar 15, 2016

To disclose

27 days

Affected

2,373

Linked

2 filings

Confidence

96%

Full breach record for Laborers Funds Administrative Office of Northern California, Inc. →

Laborers Funds Administrative Office of Northern California, Inc. (a Health Plan in CA) reported to HHS OCR on 2016-03-15 an Unauthorized Access/Disclosure affecting 2,373 individuals. On February 17, 2016, the CE discovered a tax document sent to clients and beneficiaries inadvertently contained PHI of unrelated individuals, including names, Social Security numbers, and eligibility information. Breached information located on Paper/Films. The CE remediated with new technical safeguards, updated security analysis, revised HIPAA policies, and workforce training.

J jump to incidentP pin to compareR raw source

HIPAA clock✓ HHS report on time27 days discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 27 days

Feb 17, 2016

Begins

Feb 17, 2016

Discovered

Mar 15, 2016

Filed

vs. sector median

5 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_1ab420f6a026facc2016-03-15Candidate

Name: Laborers Funds Administrative Office of Northern California, Inc.
norm: laborers funds administrative office of northern california
Industry: Insurance — Health

Name: Laborers Funds Administrative Office of Northern California, Inc.
norm: laborers funds administrative office of northern california
Industry: Insurance — Health
Industry: Healthcaresource defaultFinancial Servicesllm

Discovered: Feb 17, 2016
Breach occurred: Feb 17, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 2,373nationwide
Data types: Health (basic)Identity (basic)Government ID
HHS breach type: Unauthorized access or disclosure
Where the data lived: Paper / films
Covered-entity type: Health plan
Attack vector: Unauthorized Access
Threat actor: Internal
Regulator citations: HHS OCR investigation; OCR obtained assurances of corrective action implementation.

During the incident: Implemented new technical safeguards for creating and transmitting this type of data
Conducted a new/updated security analysis
Revised HIPAA policies and procedures
Trained workforce
Provided OCR with additional documentation including HIPAA Notice of Privacy Practices Policy
Changes made: New technical safeguards for data creation and transmission
Updated security risk analysis
Revised HIPAA policies and procedures
Workforce training
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 days(27 days from discovery to filing)
Compliance flags: HHS report on timeHHS notified
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: Feb 17, 2016
→ Notified: not extracted
— 60 days HHS report on time
HIPAA
Discovered: Feb 17, 2016
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: Feb 17, 2016 → Notified: not extracted	—	60 days	HHS report on time
HIPAA	Discovered: Feb 17, 2016 → Notified: not extracted	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

California State AGMar 15 · first

HHS OCRMar 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Mar 15, 2016
Raw hash: 890da08cbad213bc1bb98392dc0db501ab9592286f75cc910ab5a31aeff928e0

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html1.9 KB

Download View at source

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityLaborers Funds Administrative Office of Northern California, Inc.

Victim entityLaborers Funds Administrative Office of Northern California, Inc.

Incidentdiscovered Feb 17, 2016

Stated responseImplemented new technical safeguards for creating and transmitting this type of data

ComplianceHHS report on time

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing