VA Eastern Colorado Health Care System

VA Eastern Colorado Health Care System reported to HHS on 2016-11-08 an Unauthorized Access/Disclosure affecting 2,130 individuals. A workforce member emailed a spreadsheet with veterans' PHI (names, diagnoses, last four SSN digits) to a personal email account and later published it in an Amazon book. OCR investigated and provided technical assistance. The CE notified affected individuals, offered credit monitoring, and worked with Amazon to remove the book.

VA Eastern Colorado Health Care System (ECHCS) reported to HHS on 2015-04-02 a Unauthorized Access/Disclosure affecting 508 individuals. Breached information located on Paper/Films. A former employee disclosed a patient waitlist to a news reporter, exposing PHI including scheduled dates, last four digits of SSNs, and clinic names. The CE provided breach notification, investigated, and offered credit monitoring.

VA Eastern Colorado Health Care System reported to HHS OCR on 2010-05-05 a Theft affecting 649 individuals. A CE employee placed paper records containing PHI in an unsecured box left in a public parking garage for four days. PHI included treatment records, productivity reports, coding information, names, medical treatments, conditions, diagnoses, and SSNs. The CE notified affected individuals, provided credit protection for SSN exposure, and improved breach response procedures. The responsible employee resigned following OCR's investigation.