USR HOLDINGS, LLC
bd_d5d8752d980fe036 · schema v1 · pii pii-v2
Full breach record for USR HOLDINGS, LLC →Regulator's decision — not a breach notification
This record is a regulator's decision, not the organisation's own breach notice. Breach-notification fields (discovery date, notification clock) are structurally absent — what this source establishes is the outcome and the provisions the decision cites.
HHS OCR settled a HIPAA Security Rule investigation with USR Holdings, LLC, a Florida business associate, for $337,750. The settlement resolved allegations that USR failed to maintain retrievable exact copies of electronic protected health information (ePHI) after an unauthorized third party deleted ePHI from a database in 2018. USR agreed to a corrective action plan including risk analysis and regular system reviews.
J jump to incidentP pin to compareR raw source
Incident timeline — partial
? — ?
Breach window unknown
Jan 8, 2025
Filed
—
Corroborated · see linked filings
This record is the regulator's action, not a breach notice; its own dates cannot anchor compliance clocks. See the linked filings.
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- New Hampshire State AGbd_bae196506b9c94192019-02-20 · +2149dVerified
- Massachusetts State AGbd_ecf94e6e20710bbe2019-02-12 · +2157dVerified
- HHS OCRbd_2fc338bfd8a254272019-02-08 · +2161dVerified
- Illinois State AGbd_a16cf3c588b4266e2019-01-01 · +2199dVerified by operator
Filing propagation · 4 filings · 4 states
View merged incident ↗Pattern: first filing Jan 1 (IL), last Feb 20 (NH) — a 50-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- instrument + outcome
- amount as filed (USD)
- CFR provisions
- the breach it recites
- discovery date
- notification clock
The dates the agreement recites belong to the underlying breach, years earlier, and are kept as evidence of WHICH breach rather than as this record’s timeline.