Lexington VAMC (Lexington VA Medical Center, KY) reported to HHS on 2011-08-25 a Theft breach affecting 1,432 individuals. A workforce member impermissibly stored PHI — including SSNs, names, initials, ages, and diagnoses — on a personal computer, portable electronic media, and paper/films in their residence for research purposes. The CE notified 1,890 individuals and HHS. The workforce member was terminated. OCR opened a compliance review of VA Medical Centers and consolidated this incident into it.
Affected (this filing): 1,432