Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
VA Roseburg Healthcare System
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on October 1, 2014. Also cited in 14 other reports.
Report ID: PSETS0000109897, U.S. Department of Veterans Affairs
Reported Entity: ROSEBURG HCS - 653
Issue:
An employee was cleaning his office and put two boxes of miscellaneous documents in the hallway. VA Police found the boxes and notified the Privacy Officer (PO). The boxes were in the hallway for approximately one and a half hours before they were discovered. After inspecting the documents the names and other various information of 143 separate Veterans was found mixed in with other paperwork. The breakdown of what information was found is as follows: 2 = Name, last four 1 = name, last four, healthcare info 60 = name full SSN, phone number, city 26, name, full SSN, phone, address, service connection, provider name 7 = name, full SSN, provider name 1 = name, full SSN, med info, DOB 46 = name and address
Outcome:
10/02/14: There are no cameras in the area. The employee was cleaning out her office in preparation for separation from the facility. Staff has been told on several occasions that there is no recycling at the facility and all paperwork must be shredded. This employee stated that that she did not know this rule. The boxes were placed in the hallway at 8:30 AM and discovered by the VA Police at 11:00 AM. The volume of foot traffic in the area is low and mostly staff. The Incident Resolution Service Team has determined that there was a policy violation. While there was the potential for an unauthorized access/disclosure of data, it has been determined that the incident has a low probability of a risk of compromise.