LOUISIANAPhysicalHealthcareHealthcareTheftCustomer Data InvolvedData ExfiltratedPHIPIIIdentity (basic)Government IDHealth (basic)MinorHighResolved

Gail Gillespie and Associates, LLC

bd_765bdb2508dcd069 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Jun 28, 2011

To disclose

—

Affected

2,000

Confidence

94%

Full breach record for Gail Gillespie and Associates, LLC →

An unencrypted laptop and unencrypted desktop computer jointly containing ePHI of 2,334 individuals were stolen during a burglary at Gail Gillespie and Associates, LLC (LA). Stolen data included names (including parent names of minor patients), addresses, phone numbers, DOBs, SSNs, dates of service, diagnoses, prognoses, evaluations, medications, and confidential information from parents/children and schools/doctors/agencies. The covered entity notified HHS, affected individuals, and the media; purchased a monitored alarm system; and following OCR investigation conducted a risk analysis, deployed workstation encryption, and retrained employees. The HHS breach portal lists 2,000 affected individuals, while the narrative cites 2,334 — discrepancy flagged.

J jump to incidentP pin to compareR raw source

HIPAA clock✓ HHS notified

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.

Incident timeline — partial

? — ?

Breach window unknown

Jun 28, 2011

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,000 affectedView incident

Name: Gail Gillespie and Associates, LLC
norm: gail gillespie and associates

Name: Gail Gillespie and Associates, LLC
norm: gail gillespie and associates
Industry: Healthcare Provider
Industry: Healthcaresource default

Discovered: Not extracted — the OCR public portal omits it
Materiality determined: —
Notification sent: —
Affected individuals: 2,000nationwide
Data types: PHIPIIIdentity (basic)Government IDHealth (basic)Minor
HHS breach type: Theft
Where the data lived: Desktop computerElectronic medical recordEmailLaptopNetwork serverOtherPortable electronic device
Covered-entity type: Healthcare provider
Attack vector: Unknown
Threat actor: ExternalFinancial
Regulator citations: HHS OCR investigation

During the incident: Provided breach notification to HHS and affected individuals
Notified the media of the breach
Changes made: Purchased a monitored alarm system to improve physical safeguards
Conducted a risk analysis
Deployed encryption on workstations
Retrained employees
Source: Quoted from the filing itself, not independently verified.

Compliance flags: HHS notified
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: not extracted
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: not extracted → Notified: not extracted	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Jun 28, 2011
Raw hash: b4d530f2b08aa358d895b62ed61f316bd7cc86e25418e2d628d8a68ec0a58a26

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html1.9 KB

Download View at source

Reporting entityGail Gillespie and Associates, LLC

Victim entityGail Gillespie and Associates, LLC

IncidentUnknown

Stated responseProvided breach notification to HHS and affected individuals

ComplianceHHS notified

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing