Wm. Jennings Bryan Dorn VA Medical Center

Issue: Veteran A requested a copy of lab work from a VA employee. After 20 minutes of waiting six pages of Veteran B's lab results were given to Veteran A.…

Outcome: 10/31/14: The Incident Resolution Service Team has determined that Veteran B will be sent a letter offering credit protection services.…

Issue: One page PDF file was attached and sent to the wrong person. E-mail was sent unencrypted and was sent to a contracting company and was meant to go to a CMS VA employee.…

Outcome: 10/30/14: The Incident Resolution Service Team has determined that Veteran A will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: Provider called Veteran's home to give results and spoke with the spouse and not the Veteran. Provider did not verify spouse was care giver and should not have given results to the spouse. Upon looking at the notes in CPRS…

Outcome: 10/27/14: The Incident Resolution Service Team has determined that Veteran B will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: Veteran A presented mail received to the facility patient advocate with page 2 having Veteran Bs information to include full name, full SSN, full address, service connect percent, insurance information, future appointments, and hand written statement of diagnosis.

Outcome: 09/04/14: The Incident Resolution Service Team determined that Veteran B will receive a letter offering credit protection services since the full SSN was compromised.…

Issue: Veteran A received Veteran B's appointment letter in the mail. The letter had Veteran B's full name, address, partial SSN, and appointment type. Veteran A received the letter on 05/15/14 and returned the letter to the VHA on 05/31/14.…

Outcome: 08/27/14: The Incident Resolution Service Team determined that Veteran B will receive a HIPAA letter of notification, since his protected health information (PHI) was compromised.…

Issue: Veteran suspects significant other's ex-wife (VA Employee) may have inappropriately accessed medical record and appointment information. According to Veteran, she "had several appointments inexplicably cancelled". Veteran requested SPAR (Sensitive Patient Access Report) to see if specific individual accessed her medical…

Outcome: 08/19/14: The Incident Resolution Service Team has determined that Veteran A will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: A VA Employee (Service Line Records Liaison) noticed on 07/14/14 that four boxes that were being prepared for shipment to the Records Center and Vault located in Neosho, Missouri, were missing. The four boxes were labeled with Accession #VHA-14-0797 for…

Outcome: 07/22/14: The records have not been located. They are in four boxes. Each sheet of paper in the boxes is on a separate Veteran. There is a total of 3,637 Veterans involved. No cameras are in the area. Engineering was…

Issue: A Dental Clerk inadvertently mailed Patient A's information to Patient B in a fee package. Patient B, who received the information, immediately notified the Dental Clinic Supervisor, and the Privacy Officer (PO) was notified. The information was immediately returned. Patient…

Outcome: 07/18/14: The Incident Resolution Service Team determined that Patient A will receive a HIPAA letter of notification.…

Issue: Veteran B' protected health information (PHI) was inadvertently mailed to Veteran A. Veteran A contacted the news media, and the media contacted the Dorn VAMC. This incident is being investigated by the Privacy Officer (PO).…

Outcome: 07/10/14: The Incident Resolution Service Team has determined that Veteran B will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed.…

Issue: Veteran A presented to the Privacy Office at the Dorn VA Medical Center to inform the Privacy Officer (PO)that she received her medical records by mail on 04/22/14, but she was surprised to see forty four pages of medical records…

Outcome: 04/25/14: The Incident Resolution Team has determined that Veteran B will be sent a HIPAA notification letter due to Protected Health Information (PHI) being disclosed. Neither full SSN nor date of birth were disclosed.…