Howard R. Jarvis, D.M.D., L.L.C.
bd_eb45fdb6599ba629 · schema v1 · pii pii-v1
Full breach record for Howard R. Jarvis, D.M.D., L.L.C. →Southwest Portland Dental (OR) reported to HHS on 2016-08-30 a Hacking/IT Incident affecting 1,980 individuals. Between April 2012 and January 2016, unauthorized individuals accessed a shared computer network resources site used by the CE and its business associate, Patterson Dental Supply, Inc., to exchange ePHI. Exposed data included patients' names, dates of birth, and Social Security numbers. The CE implemented new HIPAA policies, notified affected individuals and media, and performed an updated risk analysis per OCR assurances. Breached information located on Network Server.
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Aug 30, 2016
- Raw hash
- f792703c0983d8d3156c43b70aeb3e0a180e6372537bf2d5a891dc1febc5e9e9
Source filing
Reporting entity
- Name
- Howard R. Jarvis, D.M.D., L.L.C.norm: howard r jarvis dmd
- Industry
- Health Care Services
Victim entity
- Name
- Howard R. Jarvis, D.M.D., L.L.C.norm: howard r jarvis dmd
- Industry
- Health Care Services
- Industry
- Healthcaresource default
Incident
- Discovered
- Jul 1, 2016
- Materiality determined
- —
- Notification sent
- Aug 30, 2016
- Affected individuals
- 1,980
- Data types
- HEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- OCR obtained assurances that the CE performed an updated risk analysis.
- Third party
- via Patterson Dental Supply, Inc.business associate
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- HIPAA 60-day OK · 60dHHS notified · 60d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: Jul 1, 2016→ Notified: Aug 30, 201660d 60 days HIPAA 60-day OK HIPAA Discovered: Jul 1, 2016→ Notified: Aug 30, 201660d regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.