The MS Center of Saint Louis and Mercy Clinic Neurology - Town and Country
bd_dcc29680534d9652 · schema v1 · pii pii-v1
Full breach record for The MS Center of Saint Louis and Mercy Clinic Neurology - Town and Country →On July 17, 2017, The MS Center of Saint Louis and Mercy Clinic Neurology - Town and Country discovered that staff had been completing and signing patient medication onboarding forms, which contained demographic and clinical information, and submitting them to pharmaceutical companies without patient authorization. This unauthorized disclosure affected 1,081 individuals. In response, the practice was stopped, the responsible employees were sanctioned, new procedures were adopted, and staff were retrained. The MS Center of Saint Louis ceased operations on March 30, 2018.
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Sep 16, 2017
- Raw hash
- 6ec6665996bdde2e6c6f4f2efa7366eceaac0040b4f6b8a368c8790032937187
Source filing
Reporting entity
- Name
- The MS Center of Saint Louis and Mercy Clinic Neurology - Town and Countrynorm: the ms center of saint louis and mercy clinic neurology town and country
- Industry
- Health Care Services
Victim entity
- Name
- The MS Center of Saint Louis and Mercy Clinic Neurology - Town and Countrynorm: the ms center of saint louis and mercy clinic neurology town and country
- Industry
- Health Care Services
- Industry
- Healthcaresource default
Incident
- Discovered
- Jul 17, 2017
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 1,081
- Data types
- HEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- Threat actor
- Internal
- Regulator citations
- OCR obtained documented assurances that the CEs implemented the above-listed voluntary corrective action steps.
Compliance
- Time to disclose
- 9 weeks(61 days from discovery to filing)
- Compliance flags
- HHS notified
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: Jul 17, 2017→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.