2026 White River Junction VA — unintentional unencrypted communications; veteran PII/PHI (Jun–Jul)
Data compromised
Personally identifiable and protected health information in unencrypted communications; VA states no indication information was compromised
Technical writeup
Verified VA notice — August 28, 2026. The White River Junction VA Medical Center (Vermont) notified veterans that between June and July 2026 several unencrypted communications inadvertently included personally identifiable and protected health information. The VA press release states there is no indication the information was compromised. No public victim count was published at indexing; veterans with questions were directed to 844-838-5433. recordsAffected 0 pending scope disclosure; companyConfirmed true.
Root cause
Several unencrypted outbound communications inadvertently included veterans’ PII and PHI between June and July 2026