DisclosureLens
UTAHHackingHealthcareHealthcareBusiness Associate (HIPAA)Customer Data InvolvedEmployee Data InvolvedEmploymentMediumResolved

Sorenson Communications/CaptionCall Group Health Plan

bd_a3df8e4086479278 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 20, 2014

Filed

Apr 24, 2014

To disclose

9 weeks

Affected

9,800

Confidence

66%
Full breach record for Sorenson Communications/CaptionCall Group Health Plan →

Sorenson Communications/CaptionCall Group Health Plan reported to HHS on 2014-04-24 a Hacking/IT Incident affecting 9800 individuals. Breached information located on Network Server. An unknown third party hacked into the CaptionCall account with Sorenson’s payroll vendor, compromising employment-related information of employees, dependents, and beneficiaries. OCR closed the breach after determining the data constituted employment records, not PHI.

HIPAA clockDiscovered Feb 20, 2014 → Notified Apr 24, 2014✓ HHS notified9 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 9 weeks / 63 days

Feb 20, 2014

Begins

Feb 20, 2014

Discovered

Apr 24, 2014

Filed

vs. sector median

on median

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed9,800 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.