RIAccidentalHealthcareGovernmentHealthcareMisdeliveryBusiness Associate (HIPAA)Customer Data InvolvedHEALTH_BASICIDENTITY_BASICMediumResolved
Rhode Island Department of Health
bd_a1b11d0dad7aa2b7 · schema v1 · pii pii-v1
Full breach record for Rhode Island Department of Health →Rhode Island Department of Health reported to HHS on 2022-12-07 an Unauthorized Access/Disclosure affecting 8,800 individuals. A workforce member erroneously sent an email containing PHI — including names, addresses, and diagnoses — to unintended recipients. Breached information located on Email. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. The workforce member was retrained on email security.
HIPAA clock✓ HHS notified
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed8,800 affectedView incident
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Dec 7, 2022
- Raw hash
- 1e36e9d9449ef8baebd63b239d02004e62fdc1c88b96d5520a7eb715c84ccdee
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- Rhode Island Department of Healthnorm: rhode island department of health
- Industry
- Health Care Services
Victim entity
- Name
- Rhode Island Department of Healthnorm: rhode island department of health
- Industry
- Health Care Services
- Industry
- Healthcaresource defaultGovernmentllm
Incident
- Discovered
- Not extracted — the OCR public portal omits it
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 8,800
- Data types
- HEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- Threat actor
- Internal
- Regulator citations
- Notified HHS
- Initial access
- insider_action
Compliance
- Compliance flags
- HHS notified
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: not extracted→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.