CHI Franciscan Health Hospice-Tacoma
bd_fde565519c55b28c · schema v1 · pii pii-v1
Full breach record for CHI Franciscan Health Hospice-Tacoma →CHI Franciscan Health Hospice (Tacoma, WA) reported to HHS OCR on 2016-11-28 that a backpack containing a laptop and paper copies of medical records was stolen from an employee's vehicle. The breach affected 12,413 individuals. PHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, medications prescribed, and other treatment information. The entity implemented physical and technical security safeguards, updated its risk analysis, sanctioned the workforce member, and re-trained all staff. OCR provided technical assistance regarding the HIPAA Security Rule.
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_eb1d34589c9fac96Washington State AGfiled 2016-11-30(2d gap)Candidate
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Nov 28, 2016
- Raw hash
- fea8c36c7f755e1a3fa6359464e9b819eade9653c01c294585b15974b743fb4c
Source filing
Reporting entity
- Name
- CHI Franciscan Health Hospice-Tacomanorm: chi franciscan health hospice tacoma
- Industry
- Health Care Services
Victim entity
- Name
- CHI Franciscan Health Hospice-Tacomanorm: chi franciscan health hospice tacoma
- Industry
- Health Care Services
- Industry
- Healthcaresource default
Incident
- Discovered
- Not extracted — the OCR public portal omits it
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 12,413
- Data types
- HEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- External
- Regulator citations
- OCR provided technical assistance to the covered entity regarding the HIPAA Security Rule.
Compliance
- Compliance flags
- HHS notified
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: not extracted→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.