Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
VA Health Care Upstate New York (VISN 2)
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on August 3, 2012. Also cited in 132 other reports.
Report ID: SPE000000078729, U.S. Department of Veterans Affairs
Reported Entity: VISN 02 Buffalo, NY
Issue:
An Environmental Management Service (EMS) staff member threw out a box of prosthetic forms (VA form 10-1394 & VA form 10-0103) that had been set aside for an office move. At first it was thought that it was misplaced in the move. After interviews with the EMS staff, it was discovered that it was discarded with the trash. The forms had information from 15 Veterans including name, address, full SSN and diagnosis. There was also 1 employee's personal records (performance appraisals) . These were in paper format. The box also included a CD. The CD was password protected for 391 Veterans, that had full name, last 4 SSN and facility seen at. Update: 08/06/12:The box was discarded on 07/24/12 or 07/25/12 and was taken to the landfill. The contract with the trash removal company does not include security language. The 15 Veterans whose full SSN was exposed will receive letters offering credit protection services and the 391 Veterans whose information was on the CD will receive letter of notification.
Outcome:
PO provided educational sessions for EMS and Prosthetics departments on safeguarding, disposal and proper notification if an event happens.