DisclosureLens
VERMONTPhysicalHealthcareHealthcareTheftCustomer Data InvolvedHealth (basic)Identity (basic)LowResolved

North Country Hospital and Health Center, Inc

bd_913c29023d59f5d6 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 15, 2013

To disclose

—

Affected

550

Confidence

98%
Full breach record for North Country Hospital and Health Center, Inc →

North Country Hospital and Health Center, Inc. (VT) reported to HHS on 2013-10-15 a Theft affecting 550 individuals. A former employee retained an unencrypted retired laptop following termination on July 15, 2013. PHI exposed included electronically signed physician orders, patient names, demographic information, and clinical diagnoses. Breached information located on a Laptop. OCR investigated; the CE implemented disk encryption, revised policies, and added a termination checklist.

HIPAA clock✓ HHS notified
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.

Incident timeline

Jul 15, 2013

Begins

Oct 15, 2013

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed550 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.