norm: the carleUSLEI 549300GZEGFR51GI4O94 · no CIKMax severity: Medium

Canonical registry

THE CARLE FOUNDATION

ent_019e0bb66466fd478b981576be54ba1f

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

1,185

as filed · HHS OCR IL

Leak-site claims

0

none in sample

Identity resolution

Canonical name: THE CARLE FOUNDATION
Normalized: the carle— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: 549300GZEGFR51GI4O94
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

ILHHS OCRas victim2016-08-04
On June 14, 2016, Carle Foundation Hospital (The Carle Foundation) discovered that its business associate, The Claro Group, placed PHI-containing files on a public FTP server on February 17, 2016, potentially making them viewable via the internet. The breach affected 1,185 individuals and involved demographic, clinical, and account number information. The CE notified HHS, affected individuals, and media. Remediation included disabling the FTP account, individual account migration, and controls including 2FA and DLP tools. OCR obtained documented assurances of corrective actions.