DisclosureLens
CALIFORNIAPhysicalHealthcareHealthcareTheftBusiness Associate (HIPAA)Customer Data InvolvedHealth (basic)Identity (basic)LowResolved

Office of Dr. David Elbaum

bd_d4a52128676cdb98 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 10, 2016

Filed

Jan 9, 2017

To disclose

9 weeks

Affected

500

Confidence

88%
Full breach record for Office of Dr. David Elbaum →

On November 10, 2016, the Office of Dr. David Elbaum (CA) discovered that paper copies of patients' PHI had been stolen from a third-party storage facility operated by a business associate. The exact date of theft is unknown. The breach affected approximately 500 individuals and included clinical and demographic information. The CE notified HHS, affected individuals, and the media; established a toll-free call center; and offered free credit monitoring. The BA implemented additional physical safeguards and OCR obtained assurances of corrective action. Submitted to HHS on 2017-01-09.

HIPAA clock✓ HHS report on time9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 9 weeks / 60 days

Nov 10, 2016

Discovered

Jan 9, 2017

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed500 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.