The Open Risk Data functionality of the Open Risk Manual is in still in active development!

US United States Department of Veterans Affairs 2013 Physical Action (Q9388)

From Open Risk Data
A data breach risk event
Language Label Description Also known as
English
US United States Department of Veterans Affairs 2013 Physical Action
A data breach risk event

    Statements

    January 2013
    0 references
    05/22/13: On May 20, the Privacy Office received a complaint that an employee located on 16 West noticed that a Sony VAIO desktop that was in the office on Friday at 4:45 pm was missing on Monday at 8:15 am. The computer was password protected, but not encrypted. It was purchased by New York University, but used by VA staff not on the VA network. The employee believes that the computer was stolen and reported the missing computer to VA Police on May 20. The computer contained memos for 23 Syracuse VA patients containing full name, full SSN and HIV Resistance status, results of the HIV Viral Load/Resistance exam. The memos were generated because the VA staff does not have access to the medical charts for patients to enter the information. The template memo was created in this computer so t (English)