WISCONSINHackingHealthcareHealthcareCustomer Data InvolvedPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICCriticalResolved
Bone & Joint Clinic, S.C.
bd_786ca69621261d8b · schema v1 · pii pii-v1
Full breach record for Bone & Joint Clinic, S.C. →Bone & Joint Clinic, S.C., a Wisconsin healthcare provider, reported a hacking/IT incident affecting a network server that exposed PHI of 105,094 individuals. Data included names, addresses, dates of birth, Social Security numbers, health insurance information, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media; posted substitute notice; offered free credit monitoring; and implemented additional administrative and technical safeguards.
HIPAA clock✓ HHS notified
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_8d202bdbb06effceMontana State AGfiled 2023-03-14(1d gap)Candidate
- bd_abfe4c8408c67439Vermont State AGfiled 2023-03-07(6d gap)Candidate
- bd_49594d62d05a0739New Hampshire State AGfiled 2023-03-20(7d gap)Verified
- bd_7531a824bea14cf7Maine State AGfiled 2023-03-20(7d gap)Candidate
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Mar 13, 2023
- Raw hash
- 0e21f52aa596c4d43d37acbc961c86c567115b9d55728b26b4ea64061d983d87
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- Bone & Joint Clinic, S.C.norm: bone joint clinic sc
Victim entity
- Name
- Bone & Joint Clinic, S.C.norm: bone joint clinic sc
- Industry
- Healthcare Provider
- Industry
- Healthcaresource default
Incident
- Discovered
- Not extracted — the OCR public portal omits it
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 105,094
- Data types
- PHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- HHS OCR breach report
Compliance
- Compliance flags
- HHS notified
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: not extracted→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.