Investigators at the Department of Veterans Affairs found that at least a dozen VA employees illegally accessed the medical records of vice presidential candidates Sen. JD Vance (R-OH) and Minnesota Gov. Tim Walz.

The agency’s leadership has provided evidence to federal prosecutors related to the employees’ actions, and has also notified the Trump/Vance and Harris/Walz campaigns about the issue:

VA Inspector General Michael Missal’s office has shared evidence to federal prosecutors on the actions of several employees in the health system, including a physician and a contractor who spent extended time looking at the candidates’ medical files, according to law enforcement officials, raising investigators’ concerns about their motives.

Like the others, the physician and contractor used their VA computers to get into the records, mostly from their government offices.

Investigators are trying to determine whether Walz or Vance’s health records have been shared as a result of the breach. The motives of those who looked at the information are under investigation, law enforcement officials said. Some employees told investigators that they were simply curious to see Walz and Vance’s medical records, as both nominees’ military service has faced scrutiny during the presidential campaign. They are the first veterans on both vice-presidential tickets since the 1996 campaign, when Democrat Al Gore and Republican Jack Kemp were running.

The VA employees did not gain access to any disability compensation records, which are held more securely than health records, officials said.

“Any attempt to improperly access Veteran records by VA personnel is unacceptable and will not be tolerated,” VA press secretary Terrence Haines told The Washington Post in an email.

Both vice presidential candidates have served in the military. Vance served in the Marine Corps for four years, while Walz was a member of the National Guard for 24 years.

The breaches are believed to have occurred in July and August, and were discovered during a security sweep of high-profile health accounts, according to The Post:

Missal’s office found that veterans’ health records are relatively easy to log into for VA physicians and other medical personnel in the health system of close to 400,000 employees serving more than 9 million registered veterans, a policy designed to ensure quick access for doctors inside and outside VA in an emergency. That contrasts with the benefits division, which distributes monthly disability compensation payments to more than 5 million veterans, and limits access to these records to a small number of employees, and fewer still for the records of high-profile figures, officials said.

Employees who are not charged with crimes could still face disciplinary actions within the agency. Viewing an individual’s health information without their knowledge or consent is a violation of the Health Insurance Portability and Accountability Act (HIPAA).

Prosecutors are looking into several factors to determine whether they will file charges, including how long they viewed the files and their intent behind accessing them. The Post’s report noted that these breaches “occur frequently as the health-care industry is exposed to increasingly sophistcated cyberattacks.”

Cyberattacks against healthcare providers in the United States have risen by 53 percent over the past three years, with large data breaches showing a 93 percent rise from 2020 to 2022.

We'll keep you posted.