VA Department of Medical Assistance Services
Disclosed Sep 14, 20233 years ago928 affectedConfirmed
The covered entity (CE), VA Department of Medical Assistance Services, reported that its business associate (BA) experienced a cyber-attack that compromised the protected health information (PHI) of 928 individuals. The PHI involved included names, addresses, and dates of birth. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and the CE and BA implemented additional administrative, technical, and security safeguards to better protect PHI.
What is known
| People affected | 928 (as reported to HHS) |
|---|---|
| Disclosed | Sep 14, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): VA Department of Medical Assistance Services (Health Plan, VA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Sep 14, 2023 | 928 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.
Everything about VA Department of Medical Assistance Services