Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
Northwest Network (VISN 20)
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on November 23, 2011. Also cited in 208 other reports.
Report ID: SPE000000068989, U.S. Department of Veterans Affairs
Reported Entity: VISN 20 Portland, OR
Issue:
In the early evening hours of 11/22/11, Veteran discovered 2 manila folders labeled with Veterans' full names, full SSNs and protected health information (PHI) sitting unattended in a smoking shelter on VA property outside the Medical Center building. The Veteran immediately carried the folders and documents to the VA emergency room and turned them over to the Administrative Officer of the Day (AOD). The folders contained documents from the facility Vascular lab. The AOD reported the incident to the Alternate Privacy Officer and the folders were recovered by the Privacy Officer from the emergency department the next morning. The supervisor over the Vascular lab has been made aware of the incident, and is working to find the employee who removed the folders from the office. At this time it is not believed any documents are missing from the folders. Update: 11/23/11:Veteran A and B will be sent a letter offering credit protection services.
Outcome:
The employee who carried the files outside the building has repeated his VA Information Security and Privacy Training modules and been counseled by his Supervisor that his actions were not acceptable. A report of the incident is being provided to human resources to determine if further disciplinary action will occur.