Virginia Commonwealth University Health System Authority
ent_019e0a71df21ff0f92ebd4bde6c6162f
Disclosures
2
HHS OCR · 1 jurisdiction
Incidents
—
no linked incident in sample
Max affected reported
4,441
nationwide · HHS OCR VA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Virginia Commonwealth University Health System Authority
- Normalized
- virginia commonwealth university health system authority— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 254900Q49RORYLCPJL40
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- vcuhealth.org
Disclosure history (2)newest first
- VAHHS OCRas victim2022-05-27
Virginia Commonwealth University Health System reported to HHS on 2022-05-27 a Unauthorized Access/Disclosure affecting 4441 individuals. Breached information located on Electronic Medical Record. A technical issue with a new EMR system and patient portal caused PHI (names, SSNs, birthdates, lab results) to be misdirected to wrong recipients. The CE provided credit monitoring and implemented additional safeguards.
- VAHHS OCRas victim2017-03-10
Virginia Commonwealth University Health System (VA) reported to HHS on 2017-03-10 an Unauthorized Access/Disclosure affecting 2,716 individuals via Electronic Medical Records. An employee of a community physician and an employee of a contracted vendor independently accessed patient records without a legitimate business need. PHI potentially viewed included full names, home addresses, dates of birth, medical record numbers, providers, visit dates, health insurance information, and diagnostic/treatment information. No malicious intent was confirmed and no data was retained. The CE implemented additional safeguards, removed browse functionality, and minimized search results. OCR obtained assurances of corrective action.