The covered entity (CE), John J. Pershing VA Medical Center, reported that a file cabinet was left unlocked in the hallway which contained the protected health information (PHI) of 1,843 individuals. The PHI involved included dates of birth, names, Social Security numbers, diagnoses, lab results, and medications prescribed. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE strengthened its administrative safeguards and retrained it staff on the importance of securing PHI.
