Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
VA Southeast Network (VISN 7)
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on November 25, 2011. Also cited in 225 other reports.
Report ID: SPE000000069036, U.S. Department of Veterans Affairs
Reported Entity: VISN 07 Montgomery, AL
Issue:
Caller contacted Release of Information (ROI) on 11/21/11 and spoke with staff member regarding package received at their place of business. ROI staff transferred caller to the Privacy Officer (PO). According to caller, a box of veteran files from CAVHCS was inadvertently shipped to the company on August 5, 2011. The box stayed at the plant unopened for several months and caller took it upon himself to ship the box back. He opened the box to find out where to ship the contents and noticed it had been shipped from Winston Salem to CAVHCS, but CAVHCS inadvertently shipped the box to his place of business. Caller placed a letter inside explaining how he received the box, along with his contact information and expressed his concern for making sure the records were returned. PO received tracking number from caller and followed up on tracking the receipt of the package. Package was shipped on 11/17/11 and received at the facility on 11/21/11. Records were from C&P. the PO met with C&P supervisor on 11/21/11. C&P Supervisor verified all records were returned intact and located in the box. There were 5 veteran files in the box. C&P Supervisor destroyed box that contained files. Unable to verify any additonal information because other labels, if any, were destroyed, along with the box. Update: 11/28/11:Five (5) Veterans will be sent letters offering credit protection services.
Outcome:
Spoke with C&P Supervisor regarding package labeling and the need to maintain strict safeguards on handling sensitive information. Requested this issue, communication and training is provided to staff duing staff-meeting (in-service).