Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
VA Sunshine Healthcare Network (VISN 8)
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on January 10, 2013. Also cited in 369 other reports.
Report ID: PSETS0000084512, U.S. Department of Veterans Affairs
Reported Entity: VISN 08 Miami, FL
Issue:
A Logistics supervisor reported that an unlocked filing cabinet was brought to the loading dock and was left unsecured for two days. The supervisor indicated that the filing cabinet contained patient information. The Privacy Officer (PO) accompanied the supervisor to the area and found that the filing cabinet had research protocol information and a logbook (dated 2002-2003). The information included patients' full name, date of birth, full social security number, lab reports, and medical data for seventy-five patients. Questioning of supervisor indicated that there are several non-VHA personnel that egress through the area. A review of police surveillance cameras was not able to identify the person responsible for placing the filing cabinet with the research information on the loading dock. Surveillance was also not able to determine if the filing cabinet was opened by any other third party while left unsecured. The research department indicated that they did not transport a filing cabinet and did not authorize anyone to transport a filing cabinet to the loading dock area. Update: 01/11/13:Letters offering credit protection services will be offered to 75 patients.01/14/13:Updated information from the Privacy Officer indicates that 49 of the patients are deceased. This will result in 26 patients receiving letters offering credit protection services and 49 Next-of-Kin notifications.
Outcome:
The filing cabinet was retrieved. Next of kin notification letters were sent to 49 deceased next of kin. Credit protection notifications were sent to 26 patients. Records manager will work with the Institutional Review Board (IRB) liaison to properly archive the research data.