Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
Dayton VA Medical Center
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on May 28, 2014. Also cited in 29 other reports.
Report ID: PSETS0000104674, U.S. Department of Veterans Affairs
Reported Entity: DAYTON OH - 552
Issue:
A call received from the Chief, Community & Public Affairs at 12:11 PM notifying the Privacy Officer (PO) that Veteran A received mail from the Dayton VA Medical Center. The mail contained two forms relating to the appointment times of Veteran B. The PO reached out to Veteran A (who received the information) on 05/28/14 at 1:01 PM requesting incident details. Veteran A stated that she received information from the Dayton VA Medical Center on 05/07/14 which was that of Veteran B. Veteran A stated that she will present the information to the PO personally on 05/29/14 to ensure its protection.
Outcome:
06/02/14: The PO completed his initial fact finding of the reported incident. It appears that he has been able to isolate this privacy incident to the employee. He reached out to the employee's supervisor on Saturday 05/21/14 to set up a date and time to complete my investigation/fact-finding. As of this date, the employee's supervisor sent an e-mail stating that he will provide a date and time for the meeting by the close of business. The Incident Resolution Team determined that the Veteran whose information was compromised will receive a HIPAA letter of notification.