Capital Digestive Care, Inc. data breach (2018)

Breach window

Feb 23, 2018

When the intrusion reportedly occurred, per the linked filings

Breach discovered

Feb 23, 2018

Reported by HHS OCR filing

59 days

MARYLANDHHS OCRFirst filinglinked via same-victim cross-source · 100%

Filed Apr 23, 2018bd_1f061ffd5a6ca270

Capital Digestive Care, Inc. (MD) reported to HHS on 2018-04-23 an Unauthorized Access/Disclosure affecting 17,639 individuals. On February 23, 2018, its business associate Laughlin, Marinaccio & Owens, Inc. stored data files on a commercial cloud server without adequate security. The breached information was on the 'Schedule a Visit' and 'Contact' web pages containing PHI. OCR reviewed the CE's risk assessment, policies, and safeguards. Corrective actions were implemented and assurances were obtained by OCR.

Affected (this filing): 17,639

HHS notified

🦬Montana State AGMost recentlinked via same-victim cross-source · 100%

Filed Apr 23, 2018bd_4586cfe7b207d1a9

Capital Digestive Care reported a data breach to the Montana Attorney General. The breach was reported on 2018-04-23. The breach occurred on 2/23/2018. 3 Montana residents were affected.

Affected (this filing): 3

Capital Digestive Care, Inc.

Litigation Timing

Timeline