HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Oct. 19, 2017.
- Organization as reported
- Mann-Grandstaff VA Medical Center, WA
- Entity type as reported
- Healthcare Provider
- Category as reported
Theft
- Location of information as reported
- Other Portable Electronic Device
- Submission date
- Oct. 19, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 14028, row:5167)
- Archived copy
- Held in the private archive (provenance)
On October 19, 2017, Mann-Grandstaff VA Medical Center, the covered entity (CE), reported that two portable hard drives containing protected health information (PHI had been stolen from its business associate (BA) on July 18, 2017. The types of PHI involved in the incident included the names, addresses, social security numbers, phone numbers, surgical information, and insurance information of 1,915 individuals. The CE provided breach notification to affected individuals, the media, and HHS. The CE conducted an investigation, and contacted the police about the incident. As a result of this incident, the CE ensured the BA took corrective actions and the CE developed and implemented new media sanitization policies to ensure the proper destruction of PHI stored on electronic devices.