DisclosureLens
MisuseHealthcareHealthcarePrivilege AbuseTargetedEmployee Data InvolvedPHIHealth (basic)PIILowContained

Derry Medical Center, PA.

bd_f007115d617c19f0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 3, 2012

Filed

Apr 9, 2012

To disclose

6 days

Affected

1scope not determined

Confidence

65%
Full breach record for Derry Medical Center, PA. →

Derry Medical Center, PA. reported to the New Hampshire Attorney General on April 9, 2012, that a former employee improperly accessed the electronic medical record of one patient between January 23 and March 28, 2012. The access was discovered on April 3, 2012, after a patient reported the employee had sought her out at her workplace. The incident was isolated, involved PHI and PII, and the employee's access was revoked.

Incident timeline

undetected · 71 days
discovery → filing · 6 days

Jan 23, 2012

Begins

Apr 3, 2012

Discovered

Apr 9, 2012

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.