HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Jan. 16, 2019.
- Organization as reported
- Lebanon VA Medical Center, PA
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Submission date
- Jan. 16, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13572, row:4711)
- Archived copy
- Held in the private archive (provenance)
An employee of the covered entity (CE) inadvertently emailed a document with protected health information (PHI) to an unintended recipient. The breach potentially affected the PHI of 993 individuals and included names and clinical information. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE restricted the ability of certain documents to be opened by unintended recipients, and retrained staff members. OCR reviewed the CE's policies and procedures to ensure compliance with the Privacy and Security Rules and obtained assurances that the CE implemented the corrective action steps listed above.