Although the information of 12,517 patients was stolen between January and June 2013, Montefiore did not learn of the incident until May 15 when it was informed by law enforcement officials, according to a Crain’s New York Business report.
“In case after case, we’ve seen how theft by a single company insider, who is often working with identity thieves on the outside, can rapidly victimize a business and thousands of its customers,” Manhattan District Attorney Cyrus Vance Jr. said in a statement. “Motivated by greed, profit, and a complete disregard for their victims, identity thieves often feed stolen information to larger criminal operations, which then go on to defraud additional businesses and victims. In this case, a hospital employee privy to confidential patient records allegedly sold financial information for as little $3 per record.”
Montefiore fired the employee following the breach and said in a notification that it has expanded both its technology monitoring capabilities and employee training on safeguarding and accessing patient records to further bolster its privacy safeguards.
More articles on health IT:
Montefiore Health System employee stole 12,000 patients’ data, hospital says
Could HealthCare.gov’s data warehouse be the target of the next big breach?: 5 things to know
Hackers break into Anthem: 10 things to know
