NEW YORKPhysicalHealthcareHealthcareTheftCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)Financial accountMediumResolved

Central Brooklyn Medical Group, PC

bd_a1548d4b058ca0b8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 25, 2010

To disclose

—

Affected

500

Confidence

97%

Full breach record for Central Brooklyn Medical Group, PC →2 incidents on file

Central Brooklyn Medical Group, PC (also known as Preferred Health Partners) reported to HHS OCR on 2010-02-25 a Theft affecting 500 individuals. Appointment schedules, pathology reports, and portions of medical records — including names, ages, telephone numbers, SSNs, medical insurance information, and other clinical data — were stolen from an office. PHI was located on paper/films. The CE filed a police report, cooperated with law enforcement, and undertook extensive remediation including locked storage, shredding, electronic verification, off-site archiving, and HIPAA retraining.

J jump to incidentP pin to compareR raw source

HIPAA clock✓ HHS notified

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.

Incident timeline — partial

? — ?

Breach window unknown

Feb 25, 2010

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed500 affectedView incident

Name: Central Brooklyn Medical Group, PC
norm: central brooklyn medical
Industry: Health Care Services

Name: Central Brooklyn Medical Group, PC
norm: central brooklyn medical
Industry: Health Care Services
Industry: Healthcaresource default

Discovered: Not extracted — the OCR public portal omits it
Materiality determined: —
Notification sent: —
Affected individuals: 500nationwide
Data types: Identity (basic)Government IDHealth (basic)Financial account
HHS breach type: Theft
Where the data lived: Paper / films
Covered-entity type: Healthcare provider
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: HHS OCR investigation opened following breach report

During the incident: Filed police report upon discovery
Worked with law enforcement to recover stolen PHI
Changes made: Removed SSNs and medical insurance numbers from tracking logs
Stored log binders in a locked area
Implemented regular document shredding
Replaced manual printing process with electronic verification system
Archived and stored all paper records off-site in locked storage
Retrained all staff on HIPAA policies and procedures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: HHS notified
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: not extracted
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: not extracted → Notified: not extracted	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Feb 25, 2010
Raw hash: 9dc67954e75c5eb2bcd9270bc44ed65262fe261ef54f7b12ccc74935f77e7889

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html2.0 KB

Download View at source

Reporting entityCentral Brooklyn Medical Group, PC

Victim entityCentral Brooklyn Medical Group, PC

IncidentUnauthorized Access

Stated responseFiled police report upon discovery

ComplianceHHS notified

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing