The Department of Veterans Affairs said the personal information of up to 26.5 million veterans was swiped from an employee’s home.
According to the VA, an employee took home electronic data containing the names, Social Security numbers and dates of birth for millions of veterans and some spouses, as well as some disability ratings. The data didn’t include any of the VA’s electronic health records and financial records.
The announcement, posted May 22 on the VA’s home page, indicated that the data was stolen when an employee’s home was burglarized.
The employee, who has been put on administrative leave pending an investigation, improperly took home the electronic data in violation of the department’s policies, said the VA.
The VA said the Federal Bureau of Investigation and VA Inspector General’s office have launched investigations.
“Authorities believe it is unlikely the perpetrators targeted the items because of any knowledge of the data contents,” said the VA.
Read more here about the Army’s pay misstep.
“It is possible that they remain unaware of the information which they possess or of how to make use of it. However, out of an abundance of caution, the VA is taking all possible steps to protect and inform our veterans.”
In the meantime, the VA said it will send notification letters to affected veterans and create a task force to coordinate a federal response.
Check out eWEEK.com’s for the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at eWEEK.com Security Center Editor Larry Seltzer’s Weblog.