Virginia Commonwealth University Health System
Disclosed May 27, 20224 years ago4,441 affectedConfirmed
The covered entity (CE), Virginia Commonwealth University Health System, reported that a technical issue with a new electronic medical record system and patient portal platform caused the protected health information (PHI) of 4,441 patients to be misdirected to the wrong recipients. The PHI involved included names, Social Security numbers, birthdates, lab results, medical record numbers, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE provided complimentary credit monitoring services and implemented additional administrative and technical safeguards to better protect its PHI.
What is known
| People affected | 4,441 (as reported to HHS) |
|---|---|
| Disclosed | May 27, 2022 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Virginia Commonwealth University Health System (Healthcare Provider, VA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | May 27, 2022 | 4,441 |
Other breaches at Virginia Commonwealth University Health System
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Mar 31, 2020Mar 31, 20206 years ago | Mar 31, 20206 years ago | Not stated | Healthcare | Confirmed | 2,131 |
| Disclosed Mar 10, 2017Mar 10, 20179 years agoInsider | Mar 10, 20179 years ago | Insider | Healthcare | Confirmed | 2,716 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.
Everything about Virginia Commonwealth University Health System