INDIANAPhysicalHealthcareHealthcareTheftCustomer Data InvolvedHealth (basic)Identity (basic)Government IDHighResolved

Ault Chiropractic Center

bd_7354f71fcd7c44b2 · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 15, 2010

Filed

Sep 15, 2010

To disclose

—

Affected

2,000

Confidence

95%

Full breach record for Ault Chiropractic Center →

Ault Chiropractic Center (Indiana) reported to HHS on 2010-09-15 a Theft affecting approximately 2,000 individuals. Two unencrypted desktop computers and one unencrypted laptop were stolen from the CE's premises during a break-in. Breached ePHI included patients' names, thermal imaging scans, contact information, insurance information, and Social Security numbers. The CE notified HHS, media, and affected individuals, reported to local police, relocated to a new facility with a security system, and implemented a Breach Notification Rule policy following OCR investigation.

J jump to incidentP pin to compareR raw source

HIPAA clockDiscovered Sep 15, 2010 → Notified Sep 15, 20100d ✓ HHS report on time

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · ≤1 day / 0 days

Sep 15, 2010

Begins

Sep 15, 2010

Discovered

Sep 15, 2010

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,000 affectedView incident

Name: Ault Chiropractic Center
norm: ault chiropractic center
Industry: Health Care Services

Name: Ault Chiropractic Center
norm: ault chiropractic center
Industry: Health Care Services
Industry: Healthcaresource default

Discovered: Sep 15, 2010
Breach occurred: Sep 15, 2010
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 15, 2010
Affected individuals: 2,000nationwide
Data types: Health (basic)Identity (basic)Government ID
HHS breach type: Theft
Where the data lived: Desktop computerLaptop
Covered-entity type: Healthcare provider
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: Reported to HHS OCR; OCR investigation conducted; CE developed and implemented Breach Notification Rule policy and procedure as a result.

During the incident: Reported theft to local police department
Provided breach notification to HHS, the media, and affected individuals
Moved to a new facility with a security system
Changes made: Relocated to new facility equipped with security system
Developed and implemented policy and procedure related to compliance with the Breach Notification Rule following OCR investigation
Source: Quoted from the filing itself, not independently verified.

Compliance flags: HHS report on time · 0dHHS notified
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: Sep 15, 2010
→ Notified: Sep 15, 2010
0d 60 days HHS report on time
HIPAA
Discovered: Sep 15, 2010
→ Notified: Sep 15, 2010
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: Sep 15, 2010 → Notified: Sep 15, 2010	0d	60 days	HHS report on time
HIPAA	Discovered: Sep 15, 2010 → Notified: Sep 15, 2010	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Sep 15, 2010
Raw hash: c3163c0795dd4bb239a436454fb934a8285894a47508a3564d0f3a4f16761137

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html1.8 KB

Download View at source

Reporting entityAult Chiropractic Center

Victim entityAult Chiropractic Center

Incidentdiscovered Sep 15, 2010

Stated responseReported theft to local police department

ComplianceHHS report on time

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing