High Plains Surgical Associates
bd_b6aafd4f09e89935 · schema v1 · pii pii-v1
Full breach record for High Plains Surgical Associates →High Plains Surgical Associates reported to HHS on January 15, 2018, an unauthorized disclosure incident affecting 607 individuals, which was discovered on October 31, 2017. The breach occurred when a former business associate mistakenly mailed paper medical billing records to other healthcare providers. The disclosed information included patient names, addresses, Social Security numbers, and clinical information. Following the breach, the HHS Office for Civil Rights (OCR) provided technical assistance to the organization regarding safeguards and their obligations under the Breach Notification Rule.
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Jan 15, 2018
- Raw hash
- 21ac1fbc6a0a157415a471ac2319b87ac9b72e0344d9ccdd053817224e0beba9
Source filing
Reporting entity
- Name
- High Plains Surgical Associatesnorm: high plains surgical associates
- Industry
- Health Care Services
Victim entity
- Name
- High Plains Surgical Associatesnorm: high plains surgical associates
- Industry
- Health Care Services
- Industry
- Healthcaresource default
Incident
- Discovered
- Oct 31, 2017
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 607
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- Threat actor
- Partner
- Regulator citations
- Notified HHSOCR provided technical assistance regarding reasonable safeguards, disclosures to BAs, BA agreements, reportable breach risk assessments, and its additional obligations under the Breach Notification Rule.
Compliance
- Time to disclose
- 11 weeks(76 days from discovery to filing)
- Compliance flags
- HHS notified
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: Oct 31, 2017→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.