The Veterans Health Administration (VHA) has taken significant steps in response to a cyber security attack. A total of 2,302 Veterans are set to receive letters notifying them of the potential disclosure of their protected health information. This information was obtained through the attack on a server managed by DBP, Inc. The affected transcribed documents contained crucial details such as full names, medical record information, and social security numbers.

Thorough Investigation and Server Actions

VHA employees conducted a comprehensive investigation into this incident. It was determined that the cyber security attack did not impact any medical record information within the VA electronic health record. Instead, the attack involved the files on the DBP, Inc. server being "locked down" (encrypted) and potentially copied by the malicious party. The vendor promptly took action by shutting down the server and disconnecting it from the internet to prevent further attacks. Additionally, new hardware was purchased and new security controls were implemented on the equipment.

Impact by VISN

The attack had varying impacts across different VISNs. In VISN 1, 386 Veterans from the VA Boston Healthcare System, 37 Veterans from the VA Connecticut Healthcare System, and 144 Veterans from the VA Togus Healthcare System were affected. In VISN 5, 25 Veterans from the Baltimore VA Medical Center were affected. In VISN 17, 1,069 Veterans from the VA Amarillo Healthcare System were affected. And in VISN 23, 616 Veterans from the VA Minneapolis Healthcare System were affected.

Privacy Notification and Contact Information

Veterans affected by the incident will receive a Privacy Notification Letter detailing the information that was at risk. Veterans with questions or concerns about whether their personal information may have been involved can call and leave a message at 1-844-838-5433 between 8 a.m. and 4:30 p.m., Monday through Friday. The Privacy Officers at the local Medical Centers will return calls within two business days.Copyright 2024 KCBD. All rights reserved.