norm: vcu health systemno LEI · no CIKMax severity: Medium

Canonical registry

VCU Health System

ent_ad68685e2f2fa34910b9527b

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

4,686

as filed · HHS OCR VA

Leak-site claims

0

none in sample

Identity resolution

Canonical name: VCU Health System
Normalized: vcu health system— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

VAHHS OCRas victim2018-07-06
VCU Health System (VA) reported to HHS on 2018-07-06 an Unauthorized Access/Disclosure affecting 4,686 individuals. From January 3, 2003, through May 10, 2018, a staff member accessed PHI without a legitimate business reason; two other employees were aware but did not report it. Breached information, located in Electronic Medical Records, included demographic, financial, and clinical data. All three employees were terminated. OCR obtained assurances of workforce-wide retraining.