Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
Asheville VA Medical Center
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on October 25, 2013. Also cited in 16 other reports.
Report ID: PSETS0000096232, U.S. Department of Veterans Affairs
Reported Entity: ASHEVILLE NC - 637
Issue:
Veteran A claims he received a letter from this facility containing a printed copy of an email pertaining to another Veteran. Veteran A refuses to return the information.
Outcome:
10/28/13: The Veteran who received a printed copy of an email (he states he received via regular mail from the Privacy Officer's (PO) office when his amendment request was denied) has returned the email, but states he has more papers that he will not return. The email is on one of our Veterans who has disciplinary actions. There is no medical information on the email, it is regarding his complaints against the facility (one of his many complaints he files) because of the disciplinary board rulings. The email addresses him as "Mr. Blank" (which is his last name) and does contain two contact phone numbers. We are trying to establish how he received the copy of the email because he initially stated that he received it from the PO in a brown envelope. However, the PO doesn't use the brown envelopes and say she has never seen the email he returned. There is a possibility that he removed it from the Patient Advocate's office while he was there a few weeks ago. The Veteran whose information was in the email will receive a general notification letter. 05/27/14: Effective this date, the following entry was discovered in the Activity tab dated 11/01/13. Veteran B, whose information was mistakenly sent to Veteran A, called stating that Veteran A called him at home letting him know he received the information on him. Veteran B is upset because Veteran A states he has more information. The PO contacted Veteran A to see what information he has in addition to what he has stated and he refuses to disclose. 05/28/14: Additional information indicates that this Veteran has a patient flag on his records as a result of an Order of Behavioral Restrictions from the VHA facility Disruptive Behavioral Committee. The message that was sent was in regard to this information and this would be considered protected health information (PHI). The Veteran will receive a HIPAA letter of notification.