Metropolitan Government of Nashville and Davidson County (Metro) Public Health Department
bd_d39df2761d856084 · schema v1 · pii pii-v1
Full breach record for Metropolitan Government of Nashville and Davidson County (Metro) Public Health Department →Metropolitan Government of Nashville and Davidson County Public Health Department reported to HHS on 2014-08-29 a breach (type: Other) affecting 1,717 individuals. On July 18, 2014, during relocation of the Children's Special Services Clinic, two metal filing units containing paper index cards were inadvertently tipped over. Index cards exposed full names, addresses, dates of birth, SSNs, and diagnosis codes. Breached information located on Other (paper index cards). CE offered credit monitoring; eliminated index card system and retrained staff. OCR obtained corrective action assurances.
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Aug 29, 2014
- Raw hash
- 7615347801f34c2754716197ea15ecb11a4c3a02d1af8670294ee7c3367b2fe3
Source filing
Reporting entity
- Name
- Metropolitan Government of Nashville and Davidson County (Metro) Public Health Departmentnorm: metropolitan government of nashville and davidson county metro public health department
- Industry
- Insurance — Health
Victim entity
- Name
- Metropolitan Government of Nashville and Davidson County (Metro) Public Health Departmentnorm: metropolitan government of nashville and davidson county metro public health department
- Industry
- Insurance — Health
- Industry
- Healthcaresource defaultGovernmentllm
Incident
- Discovered
- Jul 18, 2014
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 1,717
- Data types
- HEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- Threat actor
- Internal
- Regulator citations
- OCR obtained assurances that the CE implemented corrective actions
Compliance
- Time to disclose
- 6 weeks(42 days from discovery to filing)
- Compliance flags
- HHS notified
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: Jul 18, 2014→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.