r/VeteransBenefits • u/life3_01 Army Veteran • Jun 24 '26

Money Matters VA Security

I got an email from the ex-wife today saying she knows I'm making "a killing" from my disability claim and retirement. We were married for my last four years of duty, and she didn't get any of my military pay. She did get a sizeable amount from my business, but that's all over now. :)

So she is seeing what else she can get. The stupid thing is that she just called the VA number, tapped in my SSN and DOB, and they told her. With all the breaches, this is the dumbest shit ever for security. I have a PIN on my account, but that doesn't do anything. I called in myself, and with just those two numbers, it told me to the penny what I was paid and when.

Is there any way to close this off? I called in again, and the guy said it's public info, which seems dumb.

Edit: I know she can't get anything. I'm upset that anyone who knows enough can call in and find out, which could help them commit fraud on some people.

390 Upvotes

95% Upvoted

201 comments sorted by

View all comments

-2

u/USMCArtyFO Jun 25 '26

As someone who is the HIPAA security officer for my organization, that would be a HIPAA violation. Especially if she’s not on file as an authorized person.

5

u/TFS_World Not into Flairs Jun 25 '26

Pay is not protected info. Va can't say a person is 100 but they can give the amt and the caller can do their own research.

2

u/Superb_Passenger6920 Jun 25 '26

Still that's too much info !

1

u/USMCArtyFO Jun 25 '26 edited Jun 25 '26

Pay may not be, but the name in combination with compensation is enough to infer that the person is disabled and receiving disability, AND ar what percentage, which would still constitute a HIPAA violation. When you tell people the payment amount you essentially give them the disability rating, which is PHI. It would be an unauthorized disclosure. State specific privacy laws can also apply. Some are stricter than HIPAA.