Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
Northwest Network (VISN 20)
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on July 23, 2012. Also cited in 208 other reports.
Report ID: SPE000000078152, U.S. Department of Veterans Affairs
Reported Entity: VISN 20 Portland, OR
Issue:
Veteran A called the Portland VAMC and stated he received a letter from his PCP's office, dated 7/18/2012, reporting recent lab results. He turned the page over and found Veteran Bs medical record information on the back side of the page. Included in this other patient's information was his full name, date of birth, full social security number and specific medical record information, which Veteran A provided to the employee who received the call. From the description, the other patient's information was not in letter form (i.e. test results) but actual printed CPRS medical records. The caller indicated Veteran Bs information was printed on 7/17/12 at 18:33. There is a single page note from a VA provider to Veteran B that was electronically signed on the indicated date and time. Update: 07/23/12:Veteran B will be sent a letter offering credit protection services.
Outcome:
The employee who mailed the document could not be determined. The staff at the clinic where it was mailed from have been made aware of the printing mistake and are trying to identify processing issues that may have permitted this to occur to prevent it from being repeated.