OREGONAccidentalHealthcareHealthcareMisdeliveryCustomer Data InvolvedHEALTH_BASICIDENTITY_BASICMETADATAMediumResolved

Family Medical Group Northeast PC

bd_dddc0afa972747dd · schema v1 · pii pii-v1

Full breach record for Family Medical Group Northeast PC →

Family Medical Group Northeast PC reported to HHS on 2018-08-22 an Unauthorized Access/Disclosure affecting 2,077 individuals. On July 27, 2018, a workforce member erroneously sent an email containing PHI to 200 patients. PHI involved included patients' names, dates of birth, email addresses, and medical record numbers. Breached information was located on a Desktop Computer. The CE notified HHS, affected individuals, and media; posted substitute notice; counseled the involved employee; revised its PHI Data Extraction and Transmission policy; and retrained all workforce members. OCR provided technical assistance and confirmed corrective actions.

HIPAA clock✓ HHS notified26 days discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,077 affectedView incident

Source provenance

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Aug 22, 2018
Raw hash: 09890898865af6fdd6fdf668e347654f1a07f23b9273f4c4a074c32422660a2e

Source filing

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html1.8 KB

Download View at source

Reporting entity

Name: Family Medical Group Northeast PC
norm: family medical group northeast
Industry: Health Care Services

Victim entity

Name: Family Medical Group Northeast PC
norm: family medical group northeast
Industry: Health Care Services
Industry: Healthcaresource default

Incident

Discovered: Jul 27, 2018
Materiality determined: —
Notification sent: —
Affected individuals: 2,077
Data types: HEALTH_BASICIDENTITY_BASICMETADATA
Attack vector: Unauthorized Access
MITRE ATT&CK: T1534 Internal Spearphishing
Threat actor: Internal
Regulator citations: HHS OCR notified; OCR provided substantial technical assistance and obtained corrective action assurances
Initial access: insider_action

Compliance

Time to disclose: 26 days(26 days from discovery to filing)
Compliance flags: HHS notified
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: Jul 27, 2018
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: Jul 27, 2018 → Notified: not extracted	—	regulatory submission	HHS notified

Extraction provenance

Status: No extraction artifact recorded for this disclosure.