× Thanks for reading! Log in to continue. Enjoy more articles by logging in or creating a free account. No credit card required. Log in Sign up {{featured_button_text}}

A VCU Health System employee mistakenly donated compact discs containing patient medical information and Social Security numbers for children’s art projects, a spokeswoman said Monday.

Officials described the mistake as a breach of likely more than 1,000 medical information records. But VCU spokeswoman Anne Buckley said there was no evidence that any of the information had been misused.

Patients have been warned of the breach, according to VCU officials.

The CDs were brought by patients who had been referred to VCU Health System and included such information as the patients’ full names, medical diagnoses, medication information and social security numbers.

“The population that we are concerned about are folks that brought their information in the form of CDs that were referred to us,” said John Duval, CEO of MCV Hospitals and Clinics. “Any breach of this type has to presume that there might be individual discs out there that are still readable, so we have the duty to both investigate this to the limits of our ability and then to notify the folks of the risk that their personal health information might have been compromised.”