I really wish OCR would list the types of information involved in the breaches they report on their site. In digging into one of their newly added reports, however, I found that the incident did include SSN: Rockbridge Area Community Services State: Virginia Approx. # of Individuals Affected: 500 Date of Breach: 3/12/10 Type of…
Category: Health Data
VA and other new breach reports on OCR's breach list (updated)
OCR has updated its web site of reported breaches to now include the VA breach being reported in the news this week, as well as other breaches. Breaches not previously reported in the media or on this site are tagged with asterisks, below: Veterans Health Administration State: District of Columbia Business Associate Involved: Heritage Health…
New report on recent VA breaches identifies one contractor
Tom Spoth reports: More than 3,800 veterans had their personal information compromised last month in two data breaches that have led to renewed criticism of the Veterans Affairs Department’s data security. On April 22, an unencrypted laptop belonging to VA contractor Heritage Health Solutions was stolen from a vehicle, compromising the records of more than…
BCBS of Tenn. Breach: Lessons Learned
Howard Anderson writes: In the wake of an information breach affecting nearly 1 million people, executives at BlueCross BlueShield of Tennessee have many lessons to share and plenty of advice to offer. On Oct. 2, 2009, someone stole 57 unencrypted hard drives from servers at a call center the insurer had recently closed. So far,…
VA IT official defends work on data protection
Alice Lipowicz reports: Roger Baker, assistant secretary for information and technology at the Veterans Affairs Department, today defended the department’s efforts to protect against data theft and unauthorized access at a House hearing where the VA was criticized for two recent breaches of veterans’ personal data in Texas. Rep. Harry Mitchell (D-Ariz.), who chairs the…
B.C.: ‘Human Error’ Behind Mistake Where Patient Information Released
Laurena Weninger reports: Personal patient information sent out by Interior Health to those to whom it did not belong is being chalked up as “human error.” “This breach was caused by a setting on a new device not being correctly set, resulting in double appointment letters being stuffed into envelopes,” said a letter sent out…