Memphis VA Medical Center (MVAMC) reported to HHS OCR on 2017-03-01 an Unauthorized Access/Disclosure affecting 687 individuals. A printing format change caused wrong names to be matched with addresses in a survey mailed to members, resulting in the impermissible disclosure of names and addresses. Breached information located on Paper/Films. The CE notified affected individuals and media, reviewed the incident, retrained staff on PHI handling and privacy policy, and implemented a new mailing process. OCR obtained assurances of corrective action.
Affected (this filing): 687