Health Data Breach Tracker/VA

Healthcare Provider · Archived

Virginia Department of Behavioral Health and Developmental Services

724 individuals · submitted April 7, 2026

About this report

The covered entity (CE), Virginia Department of Behavioral Health and Developmental Services, reported that an employee mistakenly emailed the protected health information (PHI) of 724 individuals to the wrong recipient. The PHI involved names, social security numbers, and diagnoses/conditions. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE sanctioned and retrained the employee. OCR provided technical assistance to the CE regarding the HIPAA Rules.

Summary as published by the HHS Office for Civil Rights.

Organization
Virginia Department of Behavioral Health and Developmental Services
State
VA
Entity type
Healthcare Provider
Individuals affected
724
Submission date
April 7, 2026
Breach type
Unauthorized Access/Disclosure
Location of information
Email
Business associate present
No
OCR status
Archived

More breach reports in VA

More Unauthorized Access/Disclosure reports