HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of April 11, 2019.
- Organization as reported
- Martinsburg VA Medical Center, WV
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Paper/Films
- Submission date
- April 11, 2019
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13465, row:4604)
- Archived copy
- Held in the private archive (provenance)
On February 13, 2019, a misalignment of a printing process by a business associate (BA), Xerox, caused patient laboratory results to be mailed to the wrong patients, affecting 4,882 individuals’ demographic and clinical information. Following the breach, the BA and CE agreed on a their respective responsibilities, and the BA implemented a detailed quality control process for each level of the print operation. The CE reviewed its most recent risk assessment and updated it accordingly. OCR reviewed the breach notification provided to the affected individuals, as well as the security measures implemented to address risks and vulnerabilities. OCR obtained assurances that the CE implemented the corrective actions listed.