Mann-Grandstaff VA Medical Center

On October 19, 2017, Mann-Grandstaff VA Medical Center, the covered entity (CE), reported that two portable hard drives containing protected health information (PHI had been stolen from its business associate (BA) on July 18, 2017. The types of PHI involved in the incident included the names, addresses, social security numbers, phone numbers, surgical information, and insurance information of 1,915 individuals. The CE provided breach notification to affected individuals, the media, and HHS. The CE conducted an investigation, and contacted the police about the incident. As a result of this incident, the CE ensured the BA took corrective actions and the CE developed and implemented new media sanitization policies to ensure the proper destruction of PHI stored on electronic devices.