DisclosureLens
COLORADOAccidentalHealthcareHealthcareMisdeliveryCustomer Data InvolvedHealth (basic)Identity (basic)Government IDHighResolved

Rocky Mountain Health Maintenance Organization, Inc.

bd_b71b692470c2b15e · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Mar 17, 2017

To disclose

—

Affected

1,320

Confidence

50%
Full breach record for Rocky Mountain Health Maintenance Organization, Inc. →2 incidents on file

On January 23, 2017, Rocky Mountain Health Maintenance Organization, Inc. mailed letters containing protected health information (PHI) to incorrect recipients, affecting approximately 1,320 individuals. The PHI included demographic information and the last four digits of social security numbers or dates of birth. The organization notified HHS, affected individuals, and the media, and subsequently revised its HIPAA policies and procedures.

HIPAA clock✓ HHS notified
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.

Incident timeline

Jan 23, 2017

Begins

Mar 17, 2017

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,320 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.