Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
VA Sunshine Healthcare Network (VISN 8)
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on March 27, 2013. Also cited in 369 other reports.
Report ID: PSETS0000087294, U.S. Department of Veterans Affairs
Reported Entity: VISN 08 Tampa, FL
Issue:
A steno pad was found in the clinic seating area by a Veteran who turned it in to VHA staff. Update: 03/28/13: The VHA clinic staff member is sending the steno pad to Privacy Officer (PO) so information can be evaluated. 03/29/13: The email with details arrived. The steno pad had names, SSN, and blood sugar readings. The steno pad still in transit for the Privacy Officer's (PO) review. The PO is unable to determine if information is VHA or if steno pad belongs to VHA personnel. 04/04/13: It is believed that this affects between 1 and 10 patients. The PO think she should receive the steno books within a week. 04/08/13: The PO received the steno pad this morning. The data annotated appears to lab ratios, medications. The PO believes she has identified the service it belongs to and the section supervisor is investigating now. Assuming it in fact belongs to the section the PO contacted, it may have been in the area found 6-8 days. They are still looking into this. 1 last name, first name - not in our system, with PHI, medication, some sort of number ratios. 1-last name? - not in our system 1-full ssn - not in our system 3-last names only - with various medications, unidentified number ratios 1-last name last 4 - with phone number?, no other information 1-last initial, last 4 - with no other info 1-first and last name and last 4 ssn - ratio numbers and dates (8.1 09/26/12) Of the individuals in our system, the 3 with last names and protected health information (PHI) and the 1 with first and last name, last 4 digits of the SSN and ration numbers and dates will all receive HIPAA letters of notification. Notification is not required for the 1 with last name and last 4 digits of the SSN and the 1 with last name and last 4 digits of the SSN and phone number. If the PO is able to obtain contact information for the 3 who are not in our system, the 1 with last name, first name and PHI will receive a HIPAA letter of notification. The 1 with full SSN will receive a letter offering credit protection services. Notification is not required for the 1 with last initial and last 4 digits of the SSN. 05/08/13: This was determined to be HITECH reportable by VHA Privacy Office.
Outcome:
Clinic area will continue to be diligent in securing any and all documents