Lancaster Cardiology Medical Group, and Sunder Heart Institute and Vascular Medical Clinic
bd_adc4f02b81f08cef · schema v1 · pii pii-v1
Full breach record for Lancaster Cardiology Medical Group, and Sunder Heart Institute and Vascular Medical Clinic →Lancaster Cardiology Medical Group and Sunder Heart Institute & Vascular Medical Clinic (Lancaster, CA) reported to HHS on 2015-08-24 a Theft affecting 1,200 individuals (per HHS portal; web description cites ~2,071). Between June 20–21, 2015, laptop computers, desktop computers, servers, and other portable electronic devices were stolen during a burglary. Breached ePHI included clinical and demographic information. The CE notified law enforcement, HHS, affected individuals, and media. Corrective actions included full ePHI encryption, new locks, improved video surveillance, and updated safeguard policies. OCR confirmed implementation.
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Aug 24, 2015
- Raw hash
- 6eaae60f1f80b2788a1b2a940ccd690881536017b63c85cfcaef400ed5e4ce17
Source filing
Reporting entity
- Name
- Lancaster Cardiology Medical Group, and Sunder Heart Institute and Vascular Medical Clinicnorm: lancaster cardiology medical group and sunder heart institute and vascular medical clinic
- Industry
- Health Care Services
Victim entity
- Name
- Lancaster Cardiology Medical Group, and Sunder Heart Institute and Vascular Medical Clinicnorm: lancaster cardiology medical group and sunder heart institute and vascular medical clinic
- Industry
- Health Care Services
- Industry
- Healthcaresource default
Incident
- Discovered
- Jun 21, 2015
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 1,200
- Data types
- HEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- External
- Regulator citations
- HHS OCR investigation; OCR obtained assurances of corrective action implementation
Compliance
- Time to disclose
- 9 weeks(64 days from discovery to filing)
- Compliance flags
- HHS notified
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: Jun 21, 2015→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.