VAHHS OCRFirst filing
Filed Jul 6, 2018bd_c79d4cf297455f7e
VCU Health System (VA) reported to HHS on 2018-07-06 an Unauthorized Access/Disclosure affecting 4,686 individuals. From January 3, 2003, through May 10, 2018, a staff member accessed PHI without a legitimate business reason; two other employees were aware but did not report it. Breached information, located in Electronic Medical Records, included demographic, financial, and clinical data. All three employees were terminated. OCR obtained assurances of workforce-wide retraining.
Affected (this filing): 4,686
HHS notified