Contractor security flaw puts data of 7,000 veterans at risk

Jason Miller reports:

The Veterans Affairs sustained another data breach, putting more than 7,000 veterans at risk of identity theft.

A VA spokesman said in an email that a potential flaw in one of its patient databases managed by a vendor to provide home telehealth services may have exposed personal information of veterans. The contractor alerted VA on Nov. 4 of the potential security flaw. VA says more than 690,000 veterans took advantage of the national telehealth program in 2014.

“An investigation was immediately initiated and security scans were conducted by VA, which confirmed the concern,” the spokesman said. “The contracted vendor has assured VA that only vendor staff and VA staff had accessed this information. The security flaw in the vendor database was immediately corrected and VA continues to closely monitor the application.”