11 Years in Prison For Selling PHI to Lawyers for Injury Claims

U.S. District Judge Joan Lenard sentenced Rodriguez to 11 years in prison for a scam that involved selling stolen patient records to lawyers for injury claims and generating hundreds of thousands of dollars in kickbacks for himself.
Lenard's sentence was more than double the guidelines in a probation office's report.
Lenard said Rodriguez was driven by ``greed.''

``It was so he could obtain money through the misery of vulnerable victims,'' said Lenard, who also imposed a $100,000 fine.

``This sentence says to the defendant and to the Miami community that this conduct will not be tolerated,'' she added. ``It's not acceptable. It's not OK.''

http://www.miamiherald.com/2010/10/26/1891140/theft-of-patients-records-nets.html

Texas insider sentenced to 15 years for medical ID theft.

A Texas woman has been sentenced to 15 years in federal prison for orchestrating a scheme to steal the personal information of patients while she was employed by a medical billing contractor.


Katina Candrick, 34, of LaGrange, Texas, was sentenced Oct. 13 in federal court to 10 years for conspiracy to commit identity theft and five years in prison for unlawful possession of fraudulent identification documents, according to a news release from the U.S. Attorney's Office for the Western District of Texas. Her sentences will run consecutively.

In addition to her prison term, Candrick was ordered to pay more than $163,000 in restitution.

From July 6 to Nov. 13, 2009, Candrick was employed as a patient account representative at MedAssets, a Richardson, Texas-based health care billing company, prosecutors said.

http://www.scmagazineus.com/texas-insider-sentenced-to-15-years-for-medical-id-theft/article/181255/

Medical-data breach said to be major (FLASH DRIVE)

A computer flash drive containing the names, addresses, and personal health information of 280,000 people is missing - one of the largest recent security breaches of personal health data in the nation.

"We deeply regret this unfortunate incident," said Jay Feldstein, the president of the two affiliated Philadelphia companies, Keystone Mercy Health Plan and AmeriHealth Mercy Health Plan.

The breach, which involves the records of Medicaid recipients, is the first such Medicaid data breach in Pennsylvania since at least 1997, according to the state's Department of Welfare, which has oversight.

http://www.philly.com/philly/business/technology/20101021_Medical-data_breach_said_to_be_major.html

Computer consultant accused of hacking into Houston Healthcare database

WARNER ROBINS — A 21-year-old computer consultant is accused of hacking into Houston Healthcare’s database.


Christopher Stewart Wheeler of Warner Robins was charged with one count of theft by taking, four counts of computer theft and five counts of computer invasion of privacy, according to the Houston County District Attorney’s Office website.

District Attorney Rabb Wilkerson said Wheeler is not believed to have accessed any medical records or Social Security numbers.

Wheeler admitted Oct. 13 to stealing a password to the Houston Healthcare network in order to impress the information technology department in order to get a job, said Linda Watson, executive director of human resources for Houston Healthcare.http://www.macon.com/2010/10/20/1309040/computer-consultant-accused-of.html

Medical Records Dumped In Public Recycle Bin

Omaha, NE- "It's up top where anyone can just reach in and grab it," said Julie Rockwood. She's a former nurse who just happened to be dumping off her recyclables when we told her that hundreds of file folders containing personal medical records were just left in a dumpster.

"It's literally a travesty because I mean that is so private that information their health and everything so I think it's really really bad," said Rockwood.

http://www.action3news.com/Global/story.asp?S=13274402WITH VIDEO  Mash This

HHS: Reported Breaches Affecting 500 or More Individuals

As required by section 13402(e)(4) of the HITECH Act, the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals. The following breaches have been reported to the Secretary.
http://www.hhs.gov/ocr/privacy/hipaa/administrative/breachnotificationrule/breachtool.html

Information for Thousands of Columbia University Medical Center Patients on Internet

MYFOXNY.COM - Personal information -- including names and some clinical data -- of thousands of patients at Columbia University Medical Center ended up freely visible on the Internet, Columbia and NewYork-Presbyterian Hospital have confirmed.

The information on 6,800 patients was "inadvertently" placed on a server, hospital officials reported. In 10 cases, the Social Security number of the patient was also visible. The hospital has taken down the information.

The information included details such as names, ages, blood pressure, heart rates, and more -- but not full medical records, according to Myrna Manners, a spokesperson for NewYork-Presbyterian.
http://www.myfoxny.com/dpp/news/local_news/manhattan/information-for-thousands-of-columbia-university-medical-center-patients-on-web-20100927