FEDERALPhysicalHealthcareHealthcareTheftBusiness Associate (HIPAA)Customer Data InvolvedHEALTH_BASICLowResolved
Omaha Construction Industry, Privacy Manager Breach
bd_f4af765fc85380d3 · schema v1 · pii pii-v1
Full breach record for Omaha Construction Industry, Privacy Manager Breach →The covered entity, Omaha Construction Industry Health and Welfare Plan, reported that its business associate experienced a theft of an unencrypted laptop. The laptop contained the electronic protected health information (ePHI) of 800 individuals. The incident was reported to HHS on May 21, 2010. In response, both the covered entity and its business associate implemented additional administrative, technical, and security safeguards.
HIPAA clock✓ HHS notified
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
⚠ No discovery dateThe OCR public portal omits the discovery date, so the 60-day notification clock cannot be evaluated from this source — only that the filing was submitted.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed800 affectedView incident
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- May 21, 2010
- Raw hash
- 9483fa7ef21544c463f3086698a9b2e4e86796c0d38ee82d5073626b8a69a13a
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- Omaha Construction Industry, Privacy Manager Breachnorm: omaha construction industry privacy manager breach
- Industry
- Business Associate
Victim entity
- Name
- Omaha Construction Industry, Privacy Manager Breachnorm: omaha construction industry privacy manager breach
- Industry
- Business Associate
- Industry
- Healthcaresource default
Incident
- Discovered
- Not extracted — the OCR public portal omits it
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 800
- Data types
- HEALTH_BASIC
- Attack vector
- Unauthorized Access
- Threat actor
- Partner
- Regulator citations
- Notified HHS
Compliance
- Compliance flags
- HHS notified
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: not extracted→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.