US United States Department of Veterans Affairs Jan 2014 Technical Error (Q11192)
From Open Risk Manual
A data breach risk event
| Language | Label | Description | Also known as |
|---|---|---|---|
| English | US United States Department of Veterans Affairs Jan 2014 Technical Error |
A data breach risk event |
Statements
35EF8C66-6AA7-4A1C-8ACF-839125E45899
January 2014
0 references
A GE Stress Test Machine with CPU and Monitor was sold as scrap to an individual. He stated once he was able to get it to work, he had access to a patient list (approximately 163 individuals). The Privacy Officer (PO) will know the exact count once Biomed retrieves the data. The machine has been returned and in Logistics possession. 01/28/14:The DBCT determined that 143 letters offering credit protection services will be offered.It was sent out without being wiped because of lack of adherence to the media sanitization policy. The person who bought the machine was a vendor. The individual used the default password which had never been changed. The person viewed the information and recognized what it was then returned the device. The DBCT determined that 143 letters offering credit protecti (English)
