Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
VA Heartland Network (VISN 15)
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on March 9, 2011. Also cited in 149 other reports.
Report ID: SPE000000059376, U.S. Department of Veterans Affairs
Reported Entity: VISN 15 Kansas City, MO
Issue:
A Veteran reports being involved in a court case with ex-wife. He alleges ex-wife provided (verbal) information to her attorney that she could know only as a result of having accessed his medical records without his authorization. He reports having suspected her of accessing his records. So this winter (i.e. Nov/Dec. 2010), the Veteran submitted a written request for a copy of computer printout to review and help confirm his suspicions. In Feb. 2011, the Veteran called the Privacy Officer (PO) to file privacy complaint, the PO was unavailable. The Veteran left message requesting the PO return his call. On 2-28-11, the PO returned the Veteran's phone call. The Veteran advised the PO of his concerns and allegations towards his ex-wife (who is a VA employee). The PO asked the Veteran to submit a written complaint. The next workday, the PO made contact with the Information Security Officer (ISO) regarding the allegation and asked him to review the printout and advise of his findings. On 3-3-11, the PO sent the ISO a copy of the printout in the mail as he was unable to locate the one originally sent to PO in 2010. On 3-8-11, the PO sent the ISO a reminder to review printout and report his findings. On 3-9-11, the PO received a written privacy complaint from the Veteran, the letter was dated 2-28-11, it was dated and signed on 3-4-11 by the Veteran. The letter was postmarked 3-7-11 and was received by PO on Wednesday, 3-9-11. Update: 03/10/11: Vetean A will receive a notification letter. 03/14/11: According to the PO, the ex-wife accessed his record 168 times since January 1, 2005.
Outcome:
A letter of proposed removal has subsequently been given to VA employee (vet's ex-wife). Awaiting Final outcome of this proposed action.