Rocky Mountain Regional VA Medical Center
Disclosed Mar 10, 20251 year ago1,115 affectedConfirmed
The covered entity (CE), Rocky Mountain Regional VA Medical Center, reported that a workforce member inadvertently emailed a spreadsheet containing the protected health information (PHI) of 1,115 individuals to the wrong recipients. The PHI involved included names, addresses, and other identifiers. The CE notified HHS, affected individuals, and the media of the breach. In its mitigation efforts, the CE sanctioned the responsible workforce member.
What is known
| People affected | 1,115 (as reported to HHS) |
|---|---|
| Disclosed | Mar 10, 2025 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Rocky Mountain Regional VA Medical Center (Healthcare Provider, CO)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Mar 10, 2025 | 1,115 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.