New Mexico Oncology Hematology Consultants, LTD
bd_c0130343f207f3d3 · schema v1 · pii pii-v1
Full breach record for New Mexico Oncology Hematology Consultants, LTD →New Mexico Oncology Hematology Consultants, LTD reported to HHS on 2013-12-31 a Theft affecting 12,354 individuals. On November 13, 2013, a laptop was stolen from the entity's Albuquerque, NM office. The unencrypted laptop contained PHI including names, medical record numbers, dates of birth, addresses, phone numbers, clinical testing results, diagnoses, treatment information, and insurance information. The CE responded by conducting a new risk analysis, adding physical safeguards, encrypting mobile devices, revising policies, and retraining staff. OCR obtained assurances of corrective action.
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Dec 31, 2013
- Raw hash
- 1a1c6196ba21e51a6af1e0afc6847ceb106aa080ed10bbbd66601c0bb8d301da
Source filing
Reporting entity
- Name
- New Mexico Oncology Hematology Consultants, LTDnorm: new mexico oncology hematology consultants
- Industry
- Health Care Services
Victim entity
- Name
- New Mexico Oncology Hematology Consultants, LTDnorm: new mexico oncology hematology consultants
- Industry
- Health Care Services
- Industry
- Healthcaresource default
Incident
- Discovered
- Nov 13, 2013
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 12,354
- Data types
- HEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENTMETADATA
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- External
- Regulator citations
- OCR obtained assurances that the CE implemented the corrective actions noted above.
Compliance
- Time to disclose
- 7 weeks(48 days from discovery to filing)
- Compliance flags
- HHS notified
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: Nov 13, 2013→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.