DisclosureLens
INDIANAPhysicalHealthcareHealthcareTheftCustomer Data InvolvedPHIHealth (basic)Identity (basic)LowResolved

Indiana University

bd_42032fa1358c326d · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 25, 2011

To disclose

—

Affected

757

Confidence

69%
Full breach record for Indiana University →12 incidents on file

Indiana University School of Optometry reported to HHS on 2011-10-25 a Theft affecting 757 individuals. Breached information located on Network Server. A doctor's letters and reports were exposed on the Internet for one month after the security configuration of the covered entity's computer server was changed. The electronic protected health information (ePHI) of 757 individuals appearing on the Internet included patient names, birth dates, medical histories, diagnoses, and treatment plans.

HIPAA clock✓ HHS notified
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.

Incident timeline — partial

? — ?

Breach window unknown

Oct 25, 2011

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed757 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.