Portland Veterans Affairs Medical Center Data Breach

The beginning of November started badly for the Portland Veterans Affairs Medical Center in Portland, Oregon. The VA discovered that personal information of over 1500 patients was posted online, and allowed access to Social Security numbers and personal information. No personal medical information was disclosed on the website, nor were all Social Security numbers and full patient names posted. The information, posted at USAspending.gov, allowed public access to search for government contract and spending histories.

The Portland VA Medical Center is offering the affected patients free credit monitoring services and fraud alert services, which is required by a Congress law passed in 2006 after a previous data lapse. This same law requires the VA to centralize its information system and use encryption for protection of personal data.