A former assistant clerk in the Montefiore Health System was indicted for stealing patient data and selling it to an identity theft ring. The employee had access to patient names, Social Security Numbers, and dates of birth.
The individual printed records of 12,000 patients and sold the records for $3.00 each. The purchasers opened credit cards and purchased items at various retailers.
While this breach may not have been a cyber crime, it does stress the importance of having procedures in place to monitor access to sensitive information.
