HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 22, 2018.
- Organization as reported
- VA Long Beach Healthcare System, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Paper/Films
- Submission date
- June 22, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13777, row:4916)
- Archived copy
- Held in the private archive (provenance)
During a traffic stop on April 12, 2018, VA Long Beach Police discovered that the covered entity’s (CE) workforce member, without authorization, had taken possession of protected health information (PHI). The workforce member had medical folders in his vehicle which contained the PHI of approximately 1,030 individuals. The PHI involved in the breach included names, addresses, dates of birth, social security numbers and clinical information. The CE provided breach notification to HHS, affected individuals, and the media. In response to the breach the CE trained workforce members and sanctioned the workforce member responsible for the breach. OCR obtained assurances that the CE implemented the corrective actions noted above. In this case, the workforce member's sanction involved termination of employment.