VA Eastern Colorado Health Care System(ECHCS)

Issue: A patient called to report that they had received Vteran A's medication paper work in with their paperwork. The paperwork contained Veteran As full name, address, and what medication they were taking.…

Outcome: 06/19/15: The Incident Resolution Service Team has determined that Veteran A will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: A patient called to report that he had received two other Veterans' medical records in with his records request.

Outcome: 06/16/15: The Incident Resolution Service Team has determined that two Veterans will be sent letters offering credit protection services.…

Issue: Veteran A was mailed eight other Veterans' Release of Information (ROI) requests. Veteran A mailed the information back to the Hospital. The information included full names, full Social Security Numbers, addresses, and dates of birth.…

Outcome: Data not available.

Issue: A VHA supervisor who assigned to a new department was reviewing and updating employee internal personnel files and discovered that one employees file was missing. A comprehensive search was conducted and the file was not located.…

Outcome: 03/11/15: The Incident Resolution Service Team has determined that Employee A will be sent a letter offering credit protection services.…

Issue: A former VA employee, released a wait list to a reporter as a "whistle blower." The list had scheduled dates, last four digits of the SSN, and clinic names. It is possible the list also had first and last name.…

Outcome: 02/17/15: The list contains information on 508 patients. It is not known how the employee obtained the list. 02/25/15: The facility Privacy Officer has been provided the list which the media obtained. At this point, it is not known how…

Issue: Employee A socially engineered a new VA Employee B and used her log in to access VA Employee Cs record in VistA/CPRS. Employee A without the need to know and authorization accessed Employee Cs record; Employee C is known to…

Outcome: 01/27/15: The Incident Resolution Service Team has determined that Employee C will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: Provider mailed out a progress note to the wrong patient. Patient A mailed Patient Bs note to Patient B and Patient B reported the incident.…

Outcome: 12/05/14: The Incident Resolution Service Team has determined that Patient B will be sent a letter offering credit protection services.…

Issue: Veteran A received Veteran Bs lab results in the mail.

Outcome: 12/01/14: The Incident Resolution Service Team has determined that Veteran B will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: Patient A was dispensed Patient Bs medication. Patient A did not take any of the unintended medication. The prescription and paperwork have been returned to the VA for destruction.…

Outcome: 11/19/14: The Incident Resolution Service Team has determined that Patient B will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: A transition package for one Veteran faxed from the military VA intake site was faxed to the Operation Iraqi Freedom/Operation Enduring Freedom (OIF/OEF) program coordinator. The package was put in a folder and given to the Veteran to start their…

Outcome: 11/13/14: The Incident Resolution Service Team has determined that the five Veterans whose information was disclosed will be sent a notification letter.…