You’d think they’d have learned by now, but nope, 1.8 million records from patients, and doctors, too this time, have been lost or stolen from a VA research facility.รย They aren’t sure if the data was lost or stolen yet, but, “A VA research assistant was using the physician data to analyze VA health care providers and compare them to non-VA providers, according to a statement from the department. The research assistant used the hard drive to back up information contained on an office computer, and the data is not believed to have been encrypted.” according to that article from GovExec.com.
This is the VA’s third data breach in less than a year, and I can only imagine the negative press and blog coverage this one’s going to get! At least the VA should be the most secure organization for data by the time they’re done cleaning up (again) after this mess! (Maybe that last sentence would drip with less sarcasm if this wasn’t their third breach.)
This seems to be a pretty new story, one of the earliest ones I see in Google News after a quick scan is only 19 hours old, but most places have only written about it in the last 6 hours or less. I do see a couple of stories like this one from yesterday (Feb. 11th), but they just now appear to be getting widespread.รย Should see some comments from security bloggers like Martin McKeay and Bruce Schneier pretty soon, I would imagine.