HackingData ExfiltratedCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
Mercy Medical Center Redding - Oncology Clinic
bd_736c17b4321a74a3 · schema v1 · pii pii-v1
Full breach record for Mercy Medical Center Redding - Oncology Clinic →Mercy Medical Center Redding Oncology Clinic disclosed a privacy incident where transcribed physician progress notes containing patient demographic and treatment information (June–October 2014) were publicly accessible on a third-party website. The clinic notified patients on December 18, 2014, after the third party removed the link. No SSNs or financial data were involved. The clinic recommended fraud alerts and is enhancing staff education on securing medical information.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_2fd7c7b7f30afb85HHS OCRfiled 2014-12-22(3d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-47803
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 19, 2014
- Raw hash
- 7df24ce57ad59121bd2366953861406ca89ef1cf52f8fd5c2cc4f1c35173a135
Reporting entity
- Name
- Mercy Medical Center Redding - Oncology Clinicnorm: mercy medical center redding oncology clinic
Victim entity
- Name
- Mercy Medical Center Redding - Oncology Clinicnorm: mercy medical center redding oncology clinic
Incident
- Discovered
- Dec 13, 2014
- Materiality determined
- Dec 18, 2014
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1530 Data from Cloud Storage Object
- Threat actor
- External
- Regulator citations
- Submitted breach notification to California Office of Privacy Protection
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 days(6 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.