Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
VA Mid South Healthcare Network (VISN 9)
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on May 25, 2012. Also cited in 328 other reports.
Report ID: SPE000000076037, U.S. Department of Veterans Affairs
Reported Entity: VISN 09 Huntington, WV
Issue:
The Information Security Officer (ISO) received a complaint from an employee that his privacy was breached by having a .pdf document in an electronic Service folder with his SSN viewable by all of the Office staff. The ISO recommended to Service Chief to request IT to set the folder with permissions only viewable by the supervisors who need access to this folder Update: 05/25/12:Seven (7) employees will be sent letters offering credit protection services due to full SSN being exposed to those without a need to know.
Outcome:
Document removed from Service drive. Employees reminded to use more caution when handling documents with PII.