ALABAMAAccidentalHealthcareHealthcareMisdeliveryBusiness Associate (HIPAA)Customer Data InvolvedHealth (basic)Identity (basic)Medium

Birmingham Printing and Publishing Inc.

bd_fc147414444f3c3c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 6, 2013

Filed

Jan 24, 2014

To disclose

20 weeks

Affected

1,085

Confidence

50%

Full breach record for Birmingham Printing and Publishing Inc. →

On January 24, 2014, Birmingham Printing and Publishing, Inc, acting as a business associate, reported a breach affecting 1,085 individuals. The incident, discovered on September 6, 2013, involved the mislabeling of invitations for an event for cancer survivor patients, where incorrect names were printed on envelopes with correct addresses. In response, the business associate re-sent the invitations with a letter of explanation, and the covered entity terminated its contract with the business associate, bringing mailings in-house. OCR provided technical assistance regarding breach notification requirements.

J jump to incidentP pin to compareR raw source

HIPAA clock✗ HHS report late20 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 20 weeks / 140 days

Sep 6, 2013

Discovered

Jan 24, 2014

Filed

vs. sector median

+8 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,085 affectedView incident

Name: Birmingham Printing and Publishing Inc.
norm: birmingham printing and publishing
Industry: Business Associate

Name: Birmingham Printing and Publishing Inc.
norm: birmingham printing and publishing
Industry: Business Associate
Also named: Birmingham Printing and Publishing, Incdba oflegal entity
Paper Airplanedba oftrade name
Industry: Healthcaresource default

Discovered: Sep 6, 2013
Materiality determined: —
Notification sent: —
Affected individuals: 1,085nationwide
Data types: Health (basic)Identity (basic)
HHS breach type: Other
Where the data lived: Other
Covered-entity type: Business associate
Attack vector: Unknown
Regulator citations: OCR provided technical assistance

During the incident: Re-sent the invitations to the correct names and addresses
Sent a letter explaining the mistake to the affected individuals
Changes made: Terminated business relationship with the BA
Changed to processing bulk mailings in-house
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(140 days from discovery to filing)
Compliance flags: HHS report lateHHS notified
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: Sep 6, 2013
→ Notified: not extracted
— 60 days HHS report late
HIPAA
Discovered: Sep 6, 2013
→ Notified: not extracted
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: Sep 6, 2013 → Notified: not extracted	—	60 days	HHS report late
HIPAA	Discovered: Sep 6, 2013 → Notified: not extracted	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Jan 24, 2014
Raw hash: 04f913d0add299bf011fa6641351c0e3d060a0c84493dda819ae1280be21fb12

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html1.8 KB

Download View at source

Reporting entityBirmingham Printing and Publishing Inc.

Victim entityBirmingham Printing and Publishing Inc.

Incidentdiscovered Sep 6, 2013

Stated responseRe-sent the invitations to the correct names and addresses

ComplianceHHS report late

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing