DisclosureLens
RHODE ISLANDPhysicalHealthcareFinancial ServicesHealthcareTheftCustomer Data InvolvedHealth (basic)Identity (basic)Government IDHigh

Blue Cross & Blue Shield of Rhode Island

bd_e46dbe12708094f1 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Apr 21, 2010

To disclose

—

Affected

12,000

Confidence

75%
Full breach record for Blue Cross & Blue Shield of Rhode Island →4 incidents on file

Blue Cross & Blue Shield of Rhode Island reported to HHS on 2010-04-21 a theft affecting 12,000 individuals. The breach occurred when the company donated a file cabinet containing paper records with protected health information (PHI) before it was properly cleaned out. The compromised data included names, addresses, phone numbers, Social Security numbers, and Medicare ID numbers. In response, the company offered one year of free credit monitoring, retrained staff, and revised its policies.

HIPAA clock✓ HHS notified
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.

Incident timeline — partial

? — ?

Breach window unknown

Apr 21, 2010

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed12,000 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.