DisclosureLens
AccidentalHealthcareHealthcareMisconfigurationCustomer Data InvolvedData ExfiltratedPHIIdentity (basic)Government IDHealth (basic)MediumResolved

Luque Chiropractic, Inc.

bd_74345c8e546d13f6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 18, 2016

Filed

Nov 17, 2016

To disclose

9 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

65%
Full breach record for Luque Chiropractic, Inc.

Luque Chiropractic, Inc. disclosed a data security incident involving a misconfigured Amazon S3 storage account managed by its billing software provider. The vulnerability existed from May 2016 to September 11, 2016, and was discovered on September 18, 2016, when the provider notified Luque that a security researcher had accessed and downloaded data. Affected data included protected health information (PHI), patient names, addresses, diagnoses, dates of birth, treatment details, and Social Security numbers. Luque secured the account, launched an investigation, and offered credit monitoring services to affected patients. No fraud was reported.

California clockDiscovered Sep 18, 2016Notified Nov 17, 201660d CA 60-day OK9 weeks discovery → filing

Incident timeline

undetected · 140 days
discovery → filing · 9 weeks / 60 days

May 1, 2016

Begins

Sep 18, 2016

Discovered

Nov 17, 2016

Filed

vs. sector median

4 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings

View merged incident ↗
HHS OCRNov 17 · first
California State AGNov 17 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.