WISCONSINPhysicalHealthcareFinancial ServicesHealthcareLossCustomer Data InvolvedBusiness Associate (HIPAA)HEALTH_BASICIDENTITY_BASICLowResolved
Dean Health Plan
bd_46b708e1fae2fb7c · schema v1 · pii pii-v1
Full breach record for Dean Health Plan →Dean Health Plan (WI) reported to HHS on 2015-11-11 a Loss affecting 960 individuals. A mailing containing estimate of payment (EOP) documents was damaged in transit from business associate Emdeon to a bank via UPS. The USPS returned 31 of 148 pages to the CE on September 25, 2015. PHI exposed included dates of service, member names, health plan member ID numbers, and procedure codes. Breached information was located on Paper/Films. OCR investigated and reviewed BA agreement, UPS correspondence, and CE HIPAA policies.
HIPAA clock✓ HHS notified7 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed960 affectedView incident
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Nov 11, 2015
- Raw hash
- 3f9110af201647187336ed74b78184ec2ec5d6298fb53bff9031e7c9e533ef97
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- Dean Health Plannorm: dean health plan
- Industry
- Insurance — Health
Victim entity
- Name
- Dean Health Plannorm: dean health plan
- Industry
- Insurance — Health
- Industry
- Healthcaresource defaultFinancial Servicesllm
Incident
- Discovered
- Sep 25, 2015
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 960
- Data types
- HEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- Regulator citations
- HHS OCR investigated; reviewed BA agreement, UPS correspondence, and CE's HIPAA policies and procedures
Compliance
- Time to disclose
- 7 weeks(47 days from discovery to filing)
- Compliance flags
- HHS notified
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: Sep 25, 2015→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.