CALIFORNIAAccidentalHealthcareHealthcareMisdeliveryCustomer Data InvolvedPHIHealth (basic)Identity (basic)LowResolved

KAISER FOUNDATION HEALTH PLAN, INC.

bd_f28d53de63fe182e · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 8, 2017

Filed

Sep 8, 2017

To disclose

—

Affected

609

Linked

2 filings

Confidence

69%

Full breach record for KAISER FOUNDATION HEALTH PLAN, INC. →15 incidents on file

Kaiser Foundation Health Plan reported to HHS on 2017-09-08 an Unauthorized Access/Disclosure affecting 609 individuals. Breached information located on Email. A physician inadvertently emailed patient PHI (names, MRNs, procedure types) to an external account.

J jump to incidentP pin to compareR raw source

HIPAA clock✓ HHS report on time

⚠ filing dateThe stored discovery date equals the regulator filing date, so no genuine detection date was captured.

Incident timeline

discovery → filing · ≤1 day / 0 days

Sep 8, 2017

Discovered

Sep 8, 2017

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_cfea281b315d5aa72017-08-31 · +8dVerified

Name: KAISER FOUNDATION HEALTH PLAN, INC.
norm: kaiser foundation health plan
Domain: healthy.kaiserpermanente.org
Industry: Insurance — Health

Name: KAISER FOUNDATION HEALTH PLAN, INC.
norm: kaiser foundation health plan
Domain: healthy.kaiserpermanente.org
Industry: Insurance — Health
Industry: Healthcaresource default

Discovered: Sep 8, 2017
Materiality determined: —
Notification sent: —
Affected individuals: 609nationwide
Data types: PHIHealth (basic)Identity (basic)
HHS breach type: Unauthorized access or disclosure
Where the data lived: Email
Covered-entity type: Health plan
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: Notified HHSOCR obtained assurances that the CE implemented the corrective actions noted above
Initial access: insider_action

During the incident: Re-programed the device that was used to scan/email the document at issue so that it is no longer possible for an email to leave the CE's information technology network from the device
Provided notification to HHS, affected individuals, and the media pursuant to the Breach Notification Rule
Retrained the physician who mis-sent the PHI at issue in this breach
Changes made: Re-programed the device that was used to scan/email the document at issue so that it is no longer possible for an email to leave the CE's information technology network from the device
Retrained the physician who mis-sent the PHI at issue in this breach
Source: Quoted from the filing itself, not independently verified.

Compliance flags: HHS report on timeHHS notified
Discovery-date grounding: filing dateThe stored discovery date equals the regulator filing date, so no genuine detection date was captured.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: Sep 8, 2017
→ Notified: not extracted
— 60 days HHS report on time
HIPAA
Discovered: Sep 8, 2017
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: Sep 8, 2017 → Notified: not extracted	—	60 days	HHS report on time
HIPAA	Discovered: Sep 8, 2017 → Notified: not extracted	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

California State AGAug 31 · first

HHS OCR+8d · this page

Pattern: first filing Aug 31 (CA), last Sep 8 (CA) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Sep 8, 2017
Raw hash: 4a0177cc3fb4255531454220d110dbef7a1faec1b21c93a60e59845e6a3f932c

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html1.9 KB

Download View at source

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityKAISER FOUNDATION HEALTH PLAN, INC.

Victim entityKAISER FOUNDATION HEALTH PLAN, INC.

Incidentdiscovered Sep 8, 2017

Stated responseRe-programed the device that was used to scan/email the document at issue so that it is no longer possible for an email to leave the CE's information technology network from the device

ComplianceHHS report on time

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing