Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
Desert Pacific Healthcare Network (VISN 22)
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on October 23, 2012. Also cited in 129 other reports.
Report ID: PSETS0000081509, U.S. Department of Veterans Affairs
Reported Entity: VISN 22 Las Vegas, NV
Issue:
Possible lost package containing Veteran PHI/PII. Employee mailed, via UPS, CD containing x-rays and other medical information to Johns Hopkins hopsital for second opinion for Veteran, with Veteran authorization. Johns Hopkins claims package was not received. Employee failed to keep copy of UPS paperwork with tracking number, therefore unable to track the package via UPS. PHI/PII included x-rays, name, full SSN, DOB, address and phone number. Requested the employee to check again this week with Johns Hopkins to ensure the package as not been received. If not received by Friday, October 26, 2012 Privacy Officer to change ticket to an incident. Update: 10/31/12:Employee mailed the package to the wrong address (old address), PO check and could find no evidence that any other business moved into that space. UPS should have returned the package to VA, however as of October 31, 2012 the package has not been returned. Unable to track via UPS because employee did not pull the copy with tracking number on it. Therefore must assume package is missing. Changing ticket from Complaint to Incident. 11/01/12:Since the employee mailed the package to the wrong address, the Veteran will receive a letter offering credit protection services.
Outcome:
Privacy Officer requires further mailings of CD with patient information to be mailed by the ROI unit to avoid improper mailings. Employee educated on properly mailing by the Privacy Officer. Per the internet no company has moved into the vacant office where the package was shipped, therefore UPS should have returned the package as undeliverable. To date, it has not been returned, therefore must assume it is missing. Credit monitoring uploaded and mailed on November 1, 2012.