DisclosureLens
CONNECTICUTAccidentalHealthcareHealthcareMisdeliveryCustomer Data InvolvedHealth (basic)Identity (basic)MediumResolved

YALE UNIVERSITY

bd_abd8d6fe0a9aa043 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 1, 2018

Filed

Oct 17, 2018

To disclose

7 weeks

Affected

1,102

Confidence

50%
Full breach record for YALE UNIVERSITY →6 incidents on file

Yale University reported to HHS on October 17, 2018, that a mailing error affected 1,102 individuals. Due to a collating error discovered in September 2018, letters containing demographic and clinical information were sent to incorrect addresses. The breach involved paper records. In response, the university sanctioned and retrained employees and updated its mailing procedures. OCR reviewed the university's policies and confirmed compliance.

HIPAA clock✓ HHS report on time7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 7 weeks / 46 days

Sep 1, 2018

Discovered

Oct 17, 2018

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,102 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.