Luque Chiropractic, Inc. data breach (2016)

Breach window

May 1, 2016 → Sep 11, 2016

When the intrusion reportedly occurred, per the linked filings

140 days

Breach discovered

Sep 18, 2016

Reported by CALIFORNIA AG, HHS OCR filings

60 days

🐻California State AGFirst filinglinked via same-victim cross-source · 100%

Filed Nov 17, 2016bd_74345c8e546d13f6

Luque Chiropractic, Inc. disclosed a data security incident involving an Amazon S3 storage account accessible to a security researcher. The breach exposed patient names, addresses, diagnoses, dates of birth, treatment details, and Social Security numbers for individuals between May 1, 2016, and September 11, 2016. Luque offered credit monitoring and identity restoration services to affected patients.

CALIFORNIAHHS OCRMost recentlinked via same-victim cross-source · 100%

Filed Nov 17, 2016bd_b4fa8f444248994f

Luque Chiropractic, Inc. reported to HHS on 2016-11-17 a Unauthorized Access/Disclosure affecting 1341 individuals. Breached information located on Network Server. A business associate (EMR4all Inc.) notified the covered entity that its Amazon S3 storage account was subject to unauthorized access, exposing patient PHI including names, DOB, SSNs, and diagnoses.

Affected (this filing): 1,341

Luque Chiropractic, Inc.

Litigation Timing

Sensitive data

Timeline