DCHHS OCRFirst filing
Filed Nov 6, 2018bd_d1624483c59e53a5
Veterans Health Administration (VHA) reported to HHS on 2018-11-06 an Unauthorized Access/Disclosure affecting 19,254 individuals. On August 8 and September 4, 2018, business associate Xerox Corporation erroneously printed appointment reminder cards for patients that were mailed to another patient, exposing demographic and clinical information. The BA implemented additional controls including joint CE/BA template review and a match alert notification. OCR reviewed the BA agreement, notification letters, and security measures, and obtained assurances of corrective action.
Affected (this filing): 19,254
HHS notified