James A. Haley Veterans' Hospital

Issue: Employee from Post Discharge Clinic mixed her patient list with a patient's paperwork who was sent home. The patient list had 22 Veterans' first name, last name and last 4 of SSN, along with future scheduled appointment date and times.…

Outcome: 06/04/14: The incident Resolution team determined that the 22 patients will receive a HIPAA letter of notification.…

Issue: On 5/16/2014, someone took a folder off desk containing the pump records for three patients on 5/8/2014, 5/9/2014 and 5/12/2014 which included full names, full SSN, and medical information.

Outcome: 05/20/14: The Incident Resolution Team has determined that three (3) Patients will be sent letters offering credit protection services.…

Issue: Veteran A's SSN application (completed) was mailed to Veteran B. Veteran B returned the information to facility

Outcome: 05/20/14: The Incident Resolution Team has determined that Veteran A will be sent a letter offering credit protection services due to full SSN being disclosed.…

Issue: Veteran A provided the Release of Information (ROI) two identical forms to be completed by his primary care provider. The provider completed both and stated she sent both back to ROI for mailing to Veteran A. ROI mailed one completed…

Outcome: 04/11/14: The Incident Resolution Team has determined that the Veteran will be sent a letter offering credit protection services, since a document including his full SSN has been lost.…

Issue: Veteran A's order for a CT exam was entered into Veteran B's CPRS record. The work copy was printed and given to Veteran A. The document had Veteran B's full name, SSN, and DOB. Veteran A returned the document when…

Outcome: 03/19/14: The Incident Resolution Team (IRT) determined that Veteran A will receive a letter offering credit protection services since his SSN and DOB were compromised.…

Issue: Veteran A was mailed a ROI request and CD belonging to Veteran B. The CD was not accessed. The 10-5345 contained full name, address, and SSN.

Outcome: 02/20/14: IRT update: Veteran B will be sent a letter offering credit protection services.…

Issue: Lab specimen from contracted VHA clinic was left on VHA facility loading dock over the weekend by VHA contracted courier

Outcome: 02/20/14: IRT updated: Veteran A will be sent a letter offering credit protection services.…

Issue: Employee A accessed Employee B's medical record.

Outcome: 02/13/14: The Information Security Officer has not been able to contact the employee yet. 02/18/14: The employee does have a work related requirement to access the records, however this access was not related to the patients care. The patient is…

Issue: Employee A accessed Employee B's medical record.

Outcome: 02/13/14: Based on the ISO's investigation, the employee accessed the records for checking on clinic scheduling. The patient in question, however, is deceased and the employee had no reason to access that record. A notification letter will be sent to…

Issue: Employee A accessed another employee's CPRS record. Employee B had passed.

Outcome: 02/11/14: Employee's A Next of Kin will be sent a notification letter.…