VCU Health System Data Breach (2017)

Imagine having your personal and medical information stolen not once, but twice. It happened to a VCU Health System patient. And it was an inside job. “It’s extremely frustrating,” said that patient, who 8News is not identifying. “You live in that fear, will my money be taken, will accounts be opened up in my name?” The news of the security breach came in a letter. It stated her “clinical information, name, social security number, diagnosis and medications” had been inappropriately accessed by an employee. The letter also stated it had been going on for nearly two years. VCU became aware of it February 1. However, the letter dated March 21, didn’t get to the patient until March 29.