FLMisuseHealthcareHealthcareKnowledge AbuseCustomer Data InvolvedTargetedHEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved

Jackson Health System

bd_c24a349132f6ba1c · schema v1 · pii pii-v1

Full breach record for Jackson Health System →

Jackson Health System (FL) reported to HHS on 2013-02-13 a breach (type: Other) affecting 566 individuals. Federal law enforcement notified the CE on March 21, 2012 that a volunteer at Jackson North Medical Center photographed paper documents containing PHI — including names, SSNs, addresses, and birthdates — allegedly for use in an identity theft scheme. Breached information was located on Paper/Films. The CE notified affected individuals, offered free credit monitoring, and implemented corrective actions including revised HIPAA policies and enhanced volunteer oversight. OCR obtained assurances of compliance.

HIPAA clock✓ HHS notified47 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed566 affectedView incident

Source provenance

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Feb 13, 2013
Raw hash: 8e83c6c9a35b8aa014ec61546d59d9eef580d070a568f91afb02074a29cfc538

Source filing

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html2.1 KB

Download View at source

Reporting entity

Name: Jackson Health System
norm: jackson health system
Domain: jacksonhealth.org
Industry: Health Care Services

Victim entity

Name: Jackson Health System
norm: jackson health system
Domain: jacksonhealth.org
Industry: Health Care Services
Industry: Healthcaresource default

Incident

Discovered: Mar 21, 2012
Materiality determined: —
Notification sent: —
Affected individuals: 566
Data types: HEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENT
Attack vector: Unknown
Threat actor: InternalFinancial
Regulator citations: HHS OCR — corrective action plan accepted; OCR obtained assurances of implementation
Initial access: insider_action

Compliance

Time to disclose: 47 weeks(329 days from discovery to filing)
Compliance flags: HHS notified
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: Mar 21, 2012
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: Mar 21, 2012 → Notified: not extracted	—	regulatory submission	HHS notified

Extraction provenance

Status: No extraction artifact recorded for this disclosure.