Sarah Benjamin, DPM - Littleton Podiatry
bd_806aae0f8d6df286 · schema v1 · pii pii-v1
Full breach record for Sarah Benjamin, DPM - Littleton Podiatry →On August 27, 2013, an unencrypted laptop was stolen from a locked supply closet at Littleton Podiatry (Littleton, CO), exposing PHI of 3,512 individuals. Data included names, genders, addresses, phone numbers, dates of birth, health insurance information, and detailed medical records (diagnoses, treatments, surgery notes, lab results, prescriptions). The CE notified HHS, affected individuals, media, and police. Post-breach remediation included a risk analysis, risk management plan, full device encryption, and enhanced physical and administrative safeguards. OCR obtained assurances of corrective action completion.
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Sep 28, 2013
- Raw hash
- c53227b725eb67d8241338cca7551a06ea7a8b7630a46387561a0bd7cce6a004
Source filing
Reporting entity
- Name
- Sarah Benjamin, DPM - Littleton Podiatrynorm: sarah benjamin dpm littleton podiatry
- Industry
- Health Care Services
Victim entity
- Name
- Sarah Benjamin, DPM - Littleton Podiatrynorm: sarah benjamin dpm littleton podiatry
- Industry
- Health Care Services
- Industry
- Healthcaresource default
Incident
- Discovered
- Aug 27, 2013
- Materiality determined
- —
- Notification sent
- Sep 28, 2013
- Affected individuals
- 3,512
- Data types
- HEALTH_BASICIDENTITY_BASICMETADATA
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- External
- Regulator citations
- HHS OCR breach notification filedOCR obtained assurances that corrective actions were implemented
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- HIPAA 60-day OK · 32dHHS notified · 32d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: Aug 27, 2013→ Notified: Sep 28, 201332d 60 days HIPAA 60-day OK HIPAA Discovered: Aug 27, 2013→ Notified: Sep 28, 201332d regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.