DisclosureLens
AccidentalHealthcareHealthcareMisconfigurationCustomer Data InvolvedSupply Chain (3P Vendor)PHIHealth (basic)Identity (basic)LowResolved

Mercy Medical Center Redding - Oncology Clinic

bd_736c17b4321a74a3 · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 13, 2014

Filed

Dec 19, 2014

To disclose

6 days

Affected

Not disclosed

Linked

2 filings

Confidence

65%
Full breach record for Mercy Medical Center Redding - Oncology Clinic

Mercy Medical Center Redding Oncology Clinic discovered on December 13, 2014, that transcribed physician progress notes containing patient demographic and treatment information (name, medical record number, date of birth, diagnosis, medications, etc.) were publicly accessible on a third-party website. The data covered services provided between June and October 2014. The third party removed the link upon discovery. No SSNs or financial information were involved. The organization is educating staff on securing medical information.

California clockDiscovered Dec 13, 2014Notified Dec 18, 20145d CA 60-day OK6 days discovery → filing

Incident timeline

undetected · 195 days
discovery → filing · 6 days

Jun 1, 2014

Begins

Dec 13, 2014

Discovered

Dec 19, 2014

Filed

vs. sector median

12 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings

View merged incident ↗
California State AGDec 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.