CALIFORNIAHackingHealthcareHealthcareBusiness Associate (HIPAA)Customer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENTHighResolved
Luque Chiropractic, Inc.
bd_b4fa8f444248994f · schema v1 · pii pii-v1
Full breach record for Luque Chiropractic, Inc. →Luque Chiropractic, Inc. reported to HHS on 2016-11-17 a Unauthorized Access/Disclosure affecting 1341 individuals. Breached information located on Network Server. A business associate (EMR4all Inc.) notified the covered entity that its Amazon S3 storage account was subject to unauthorized access, exposing patient PHI including names, DOB, SSNs, and diagnoses.
HIPAA clock✓ HHS notified9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_74345c8e546d13f6California State AGfiled 2016-11-17Verified
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Nov 17, 2016
- Raw hash
- 6adaa1ff233fa5b299874d2867669d2cdfa3a4e151f45c413e95dbe11f8e1ff6
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- Luque Chiropractic, Inc.norm: luque chiropractic
- Industry
- Health Care Services
Victim entity
- Name
- Luque Chiropractic, Inc.norm: luque chiropractic
- Industry
- Healthcaresource default
Incident
- Discovered
- Sep 18, 2016
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 1,341
- Data types
- PHIHEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified HHSOCR provided substantial technical assistance
- Third party
- via EMR4all Inc.business associate
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- HHS notified
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: Sep 18, 2016→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.