MARYLANDHackingHealthcareHealthcareBusiness Associate (HIPAA)Customer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTPHICriticalContained
Center for Vein Restoration
bd_ab93474d092a3a14 · schema v1 · pii pii-v1
Full breach record for Center for Vein Restoration →Center for Vein Restoration (MD) reported to HHS OCR on 2024-12-05 a Hacking/IT Incident affecting 446,094 individuals. Breached information was located on a Network Server. The cyberattack compromised PHI including names, home addresses, dates of birth, Social Security and driver's license numbers, medical record numbers, diagnoses, lab results, medications, health insurance information, and financial information. The CE notified HHS, affected individuals, and the media, and implemented additional administrative, technical, and security safeguards in response.
HIPAA clock✓ HHS notified
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_238fbc3688748ddcMaine State AGfiled 2024-12-12(7d gap)Verified
- bd_8dddcacdcc699bf2Montana State AGfiled 2024-12-12(7d gap)Verified
- bd_bab92f23829f8eedVermont State AGfiled 2024-12-12(7d gap)Verified
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Dec 5, 2024
- Raw hash
- be48b2f16f7d6ccc3d3b6fe1edab22570e7437bcd0582f77ce5e6dc1b760bf07
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- Center for Vein Restorationnorm: center for vein restoration
- Domain
- centerforvein.com
- Industry
- Business Associate
Victim entity
- Name
- Center for Vein Restorationnorm: center for vein restoration
- Domain
- centerforvein.com
- Industry
- Business Associate
- Industry
- Healthcaresource default
Incident
- Discovered
- Oct 6, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 446,094
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- HHS OCR notified
Compliance
- Compliance flags
- HHS notified
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: Oct 6, 2024→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.