FLPhysicalHealthcareHealthcareTheftLossCustomer Data InvolvedHEALTH_BASICIDENTITY_BASICFINANCIAL_ACCOUNTMediumResolved
Luz Colon, DPM Podiatry
bd_ff6087452c0a3e43 · schema v1 · pii pii-v1
Full breach record for Luz Colon, DPM Podiatry →On March 20, 2012, an unencrypted laptop belonging to Luz Colon, DPM Podiatry (also operating as Absolute Foot and Ankle Specialists Inc., FL) was lost or stolen, exposing demographic, clinical, and financial information of 1,137 individuals. The CE notified HHS, affected individuals, and English and Spanish media. Corrective actions included prohibiting equipment removal from premises and adopting cloud-based EMR software. OCR obtained assurances of compliance.
HIPAA clock✓ HHS notified9 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,137 affectedView incident
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- May 19, 2012
- Raw hash
- 2d70123eae2a1c3330ffe177c1fc4e539345e4514eab510d63b916aef8d206be
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- Luz Colon, DPM Podiatrynorm: luz colon dpm podiatry
- Industry
- Health Care Services
Victim entity
- Name
- Luz Colon, DPM Podiatrynorm: luz colon dpm podiatry
- Industry
- Health Care Services
- Industry
- Healthcaresource default
Incident
- Discovered
- Mar 20, 2012
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 1,137
- Data types
- HEALTH_BASICIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Regulator citations
- HHS OCR — corrective action assurances obtained
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- HHS notified
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: Mar 20, 2012→ Notified: not extracted— regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.