Premier Healthcare Properties, LLC
bd_b3777b44c649529d · schema v1 · pii pii-v1
Full breach record for Premier Healthcare Properties, LLC →Premier Healthcare, LLC (Bloomington, IN) reported to HHS OCR on 2016-03-04 a laptop theft affecting 205,748 individuals. An unencrypted laptop was stolen from the CE's administrative office on or before January 4, 2016. The device was anonymously returned in March 2016; forensic analysis confirmed the laptop had never been powered on or accessed. Breached data included names, addresses, DOBs, SSNs, claims info, credit/bank account details, and medical information. The CE subsequently encrypted all computers, improved physical safeguards, and implemented new security procedures. OCR verified corrective actions. The CE was later acquired by Indiana University Health Southern Indiana Physicians, Inc. effective May 1, 2017.
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Mar 4, 2016
- Raw hash
- 7a7867483494e58006ec32b0f665b4799c748cac68f667d3bc319a7909986a14
Source filing
Reporting entity
- Name
- Premier Healthcare Properties, LLCnorm: premier healthcare properties
- Industry
- Health Care Services
Victim entity
- Name
- Premier Healthcare Properties, LLCnorm: premier healthcare properties
- Industry
- Health Care Services
- Industry
- Healthcaresource default
Incident
- Discovered
- Jan 4, 2016
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 205,748
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- External
- Regulator citations
- HHS OCR notified; OCR obtained documentation substantiating corrective actions
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- HHS notified
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: Jan 4, 2016→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.