DisclosureLens
WYOMINGAccidentalHealthcareHealthcareMisdeliveryBusiness Associate (HIPAA)Customer Data InvolvedIdentity (basic)Government IDHealth (basic)Medium

High Plains Surgical Associates

bd_b6aafd4f09e89935 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 31, 2017

Filed

Jan 15, 2018

To disclose

11 weeks

Affected

607

Confidence

50%
Full breach record for High Plains Surgical Associates →

High Plains Surgical Associates reported to HHS on January 15, 2018, an unauthorized disclosure incident affecting 607 individuals, which was discovered on October 31, 2017. The breach occurred when a former business associate mistakenly mailed paper medical billing records to other healthcare providers. The disclosed information included patient names, addresses, Social Security numbers, and clinical information. Following the breach, the HHS Office for Civil Rights (OCR) provided technical assistance to the organization regarding safeguards and their obligations under the Breach Notification Rule.

HIPAA clock✓ HHS notified11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 11 weeks / 76 days

Oct 31, 2017

Discovered

Jan 15, 2018

Filed

vs. sector median

1 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed607 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.