On March 31, 2016, the covered entity's (CE) Lead Narcotic Inspector discovered that the monthly narcotic reports were missing. On April 6, 2016, CE's police notified the facility Privacy Officer of the incident and reported the incident to the VA Network and Security Operations Center. The CE provided breach notification to HHS, the media, and affected individuals and offered credit monitoring. The CE's Police Security Service reviewed the available closed circuit television footage and could not determine who removed the documents from the location. The CE transferred the duties of the Lead Narcotic Inspector to another employee. OCR obtained assurances that the CE implemented the corrective actions listed.
