- State
- KY
- Covered entity type
- Healthcare Provider
- Individuals affected
- 1,432
- Business associate present
- No
- Type of breach
- Theft
- Location of breached information
- Laptop, Other Portable Electronic Device, Paper/Films
- First seen by InfoSec Signals
- 9/23/2026
- Last seen in OCR export
- 9/23/2026
OCR description
The covered entity's (CE) workforce member impermissibly stored the protected health information (PHI) of 1,432 individuals in a personal computer and other portable electronic media in order to conduct research. The PHI included social security numbers, names, initials, ages, and diagnoses. Additional PHI was found in the workforce member's residence. The CE provided breach notification to a total of 1,890 affected individuals and HHS. Following the breach, the responsible workforce member is no longer employed by the CE.
\
\OCR opened a compliance review of VA Medical Centers and is consolidating the investigation of this incident into the compliance review.
\
Change history
- 9/23/2026Added to OCR's archive list
Source: HHS OCR Breach Portal, U.S. Department of Health and Human Services, Office for Civil Rights about this source
Records are reproduced as published; entity names and figures are OCR's.