US Veterans Health Administration Mar 2015 Technical Error (Q9517)

From Open Risk Manual
A data breach risk event
Language Label Description Also known as
English
US Veterans Health Administration Mar 2015 Technical Error
A data breach risk event

    Statements

    March 2015
    0 references
    This comes after a News 3 investigation into an instance in April when hundreds of Social Security numbers belonging to Wisconsin veterans were emailed to a random citizen from a federal VA.gov email address. Federal privacy laws and multiple VA regulations require all emails with personally identifiable information to be password-protected. Current VA software flags emails with 9-digit numbers separated by dashes, but not for 9-digit sequences that dont have dashes. In the U.S. military, since Vietnam, veterans file numbers -- their identification numbers -- have been their Social Security numbers without dashes to separate the numbers. The VA Inspector General needs to investigate whether the VA system and process effectively safeguards our veterans personal information, wrote Baldwin i (English)