MisuseHealthcareHealthcarePrivilege AbuseEmployee Data InvolvedCustomer Data InvolvedPHIPIIIdentity (basic)LowContained

Lawrence Melrose Medical Electronic Record, Inc.

bd_a94333e95873bd3d · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Mar 12, 2013

To disclose

—

Affected

2state residents only

Confidence

68%

Full breach record for Lawrence Melrose Medical Electronic Record, Inc. →

Lawrence Melrose Medical Electronic Record, Inc. (LMMER) notified the NH AG of an insider incident where a medical practice employee accessed electronic medical records and patient registration info. Two NH residents were affected. LMMER and six affiliated practices are providing one year of credit monitoring via Kroll and notifying HHS OCR.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Mar 12, 2013

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: Edwards Wildman Palmer LLP
norm: edwards wildman palmer

Name: Lawrence Melrose Medical Electronic Record, Inc.
norm: lawrence melrose medical electronic record
Industry: Healthcarellm

Discovered: —
Materiality determined: —
Notification sent: Mar 14, 2013
Affected individuals: 2state-resident count only
Data types: PHIPIIIdentity (basic)
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: Notified New Hampshire Attorney General's OfficeWill notify the Office of Civil Rights of the U.S. Department of Health and Human Services
Initial access: insider_action

During the incident: Engaged Kroll Advisory Solutions to provide one year of credit monitoring and identity theft consultation and restoration services
Submitting notice to the Office of Civil Rights of the U.S. Department of Health and Human Services
Notifying affected individuals via first-class mail
Changes made: Implementing privacy and data security enhancement measures
Increasing the profile of privacy and data security issues at all levels
Re-training employees of the participating medical groups regarding privacy and data security policies and procedures
Engaging consultants to develop a tool for more effectively monitoring access to patient medical records
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lawrence-melrose-medical-20130312.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 12, 2013
Raw hash: 9b69d9dd187e4ac10d126a7b4b7584a4e7f4f6deb3cb578f92fa2bf8c71a9a4d

Reporting entityEdwards Wildman Palmer LLP

Victim entityLawrence Melrose Medical Electronic Record, Inc.

IncidentInsider

Stated responseEngaged Kroll Advisory Solutions to provide one year of credit monitoring and identity theft consultation and restoration services

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov