DisclosureLens
GEORGIAMisuseHealthcareGovernmentHealthcarePrivilege AbuseKnowledge AbuseCustomer Data InvolvedEmployee Data InvolvedHealth (basic)Identity (basic)Government IDFinancial accountHighResolved

Terrell County Health Department

bd_d65d122224b3c0b8 · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 6, 2012

Filed

Feb 18, 2013

To disclose

11 weeks

Affected

18,000

Confidence

96%
Full breach record for Terrell County Health Department →

Terrell County Health Department (GA) reported to HHS on 2013-02-18 an Unauthorized Access/Disclosure affecting 18,000 individuals. On December 6, 2012, the Dawson Police Department notified the CE that an employee was suspected of identity theft of patients. All patients whose records the employee had access to during employment were potentially affected. PHI involved included demographic, clinical, financial, and health insurance information. The CE terminated the employee, re-educated staff, and improved HIPAA training, risk analysis, software, and auditing. OCR obtained assurances of corrective action.

HIPAA clock✓ HHS notified11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 11 weeks / 74 days

Dec 6, 2012

Discovered

Feb 18, 2013

Filed

vs. sector median

on median

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed18,000 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.