DisclosureLens
FLORIDAHackingHealthcareHealthcareCustomer Data InvolvedHealth (basic)Identity (basic)Government IDFinancial accountCriticalContained

North Broward Hospital District

bd_8005a0ba482c26af · schema v1 · pii pii-v1

Severity

Critical

Discovered

—

Filed

Jan 2, 2022

To disclose

—

Affected

1,351,431

Linked

5 filings

Confidence

50%
Full breach record for North Broward Hospital District →

The covered entity (CE), North Broward Hospital District dba Broward Health, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 1,351,432 individuals. The PHI involved included names, addresses, telephone numbers, financial information, Social Security and drivers’ license numbers, health insurance information, diagnoses, medical record numbers, and email addresses. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE reset all passwords, implemented additional technical safeguards, and offered complimentary credit monitoring services to affected individuals.

HIPAA clock✓ HHS notified
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.

Incident timeline — partial

? — ?

Breach window unknown

Jan 2, 2022

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Indiana State AGJan 1 · first
Montana State AGJan 1 · first
Massachusetts State AG+1d
HHS OCR+1d · this page
New Hampshire State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.