Valley View Hospital Association

Valley View Hospital Association notified the New Hampshire Attorney General of a potential data security incident affecting 6 NH residents. On January 19, 2022, unauthorized access to employee email accounts was discovered. The emails contained names and limited medical information. Notifications were sent on April 28, 2022. The organization engaged forensic investigators and implemented additional email controls.

Valley View Hospital Association reported a data breach to the Indiana Attorney General. The breach occurred on 2022-01-10 and was reported on 2022-04-28. 3 Indiana residents were affected. 21,708 individuals affected in total.

Valley View Hospital Association notified Montana residents of a data breach discovered on January 19, 2022, where unauthorized access to employee email accounts may have exposed names, SSNs, DOBs, and limited medical information. The organization secured accounts, engaged forensic investigators, and offered one year of Experian IdentityWorks.

Valley View Hospital Association reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-04-28. 16 Massachusetts residents were affected. The report records the breach type as electronic.

Valley View Hospital Association reported a data breach affecting 21,708 individuals, which occurred from January 10, 2022, to January 19, 2022. The breach, described as an internal system issue, was discovered on March 29, 2022. The organization notified the affected individuals in writing on April 28, 2022.

Valley View Hospital Association reported that multiple employees were victims of an email phishing attack affecting the protected health information (PHI) of 21,826 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, drivers’ license numbers, claims and financial information, diagnoses, and other treatment information.

On January 25, 2014, Valley View Hospital Association (Glenwood Springs, CO) discovered malware had infected 172 computer workstations. On 90 of those workstations, the malware captured screen shots of ePHI belonging to 5,415 individuals and stored them as encrypted hidden files. Exposed data included names, SSNs, demographic information, and credit card data. The CE deployed anti-virus software, notified HHS, affected individuals, and media. OCR's investigation led to revised ePHI safeguarding procedures and an updated risk analysis and management plan. Breached information located on Desktop Computer and Laptop.