Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
VA Mid South Healthcare Network (VISN 9)
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on February 17, 2011. Also cited in 328 other reports.
Report ID: SPE000000058494, U.S. Department of Veterans Affairs
Reported Entity: VISN 09 Nashville, TN
Issue:
On February 15, 2011, Patient A was seen at Chattanooga CBOC. Upon completion of the appt, Patient A was given instructions which included a list of medications. After leaving the clinic, Patient A reviewed the instructions and noted he had also received a medication list for Patient B which included Patient B's full name, full SSN, list of eight medications and medical diagnosis for which they are prescribed. On February 16, 2011, Patient A reported the incident to the Patient Advocate (Nashville campus) who notified the Privacy Officer via email.Today, February 17, 2011, PO contacted Patient A and confirmed the above information. PO confirmed Patient A still has Patient B's document. Patient A agreed to return the document to PO. PO mailed Patient A a VA envelope (with PO's address) to return directly to PO. Update: 02/17/11:Patient B will receive a letter offering credit protection services since their full SSN was exposed.
Outcome:
The nurse responsible has been counseled regarding the importance of protecting Veteran's PII.