Valley View Hospital Association

Valley View Hospital Association notified the New Hampshire Attorney General of a potential data security incident affecting 6 NH residents. On January 19, 2022, unauthorized access to employee email accounts was discovered. The emails contained names and limited medical information. Notifications were sent on April 28, 2022. The organization engaged forensic investigators and implemented additional email controls.

Valley View Hospital Association reported a data breach to the Montana Attorney General. The breach was reported on 2022-04-28. The breach occurred on 1/19/2022. 7 Montana residents were affected.

Valley View Hospital Association reported a data breach affecting 21,708 individuals, which occurred from January 10, 2022, to January 19, 2022. The breach, described as an internal system issue, was discovered on March 29, 2022. The organization notified the affected individuals in writing on April 28, 2022.

Valley View Hospital Association reported that multiple employees were victims of an email phishing attack affecting the protected health information (PHI) of 21,826 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, drivers’ license numbers, claims and financial information, diagnoses, and other treatment information.

On January 25, 2014, Valley View Hospital Association (Glenwood Springs, CO) discovered malware had infected 172 computer workstations. On 90 of those workstations, the malware captured screen shots of ePHI belonging to 5,415 individuals and stored them as encrypted hidden files. Exposed data included names, SSNs, demographic information, and credit card data. The CE deployed anti-virus software, notified HHS, affected individuals, and media. OCR's investigation led to revised ePHI safeguarding procedures and an updated risk analysis and management plan. Breached information located on Desktop Computer and Laptop.