Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
VA New England Healthcare System (VISN 1)
Mentioned in a privacy incident report created by the U.S. Department of Veterans Affairs on August 11, 2011. Also cited in 204 other reports.
Report ID: SPE000000065665, U.S. Department of Veterans Affairs
Reported Entity: VISN 01 White River Junction, VT
Issue:
A Rights Management (RMS) protected email was accidentally sent to a non-VA email address along with other VA employee email addresses. The email included the Veteran's name, full SSN and protected health information. Update: 08/15/11:The email went to an outside non-VA business. The employee and the PO tried to recall the RMS email but were unable to do so. The employee will call the company to obtain an attestation that they deleted the email. The Veteran will receive a letter offering credit protection services.
Outcome:
The employee was educated to review email addresses sent utilizing the RMS system as it may be accessed via the non VA e-mail system even though it is protected.