Medical identity theft happens when someone steals your personal medical related information and uses it to receive medical care, fill prescriptions, purchase medical devices, submit claims and receive benefits in your name.
This can happen when a thief steals your insurance or Medicare information, or when a security breach occurs, and your personal information is exposed.
It can also happen when an employee working within the healthcare system abuses their position and leaks confidential information to an outside source. The dark web and black market pay for this kind of data. A survey done by Accenture in 2018 found that 18% of employees working within the medical system would be willing to sell patient information to criminals and 24% of respondents said they know of someone who has done so.
Another way this can happen is when a friend, acquaintance or family member uses their trusted position to access someone else’s medical identification and benefits. A survey done by Ponemon Institute, a cybersecurity research firm found that “the majority of respondents said the crime happened because they knowingly shared their personal identification or medical credentials with someone they knew (30 percent) or a member of the family took their personal identification or medical credentials without consent (28 percent)”
The Federal Trade Commission (FTC) reported that there were almost 43,000 incidents of medical identity theft in 2021.
Warning Signs
You get an invoice for medical care you did not receive.
You get a phone call, email or text message asking for personal information such as your insurance number or Medicare information.
You receive a notification from your insurance provider that you have reached your benefit limit, referring to treatment you never received.
You are contacted by a collection agency over bills for medical care you did not receive.
Your credit report lists medical charges you do not recognize.
An explanation of benefits (EOB) from your insurer or a Medicare Summary Notice includes medical care you do not recognize.
Your medical records contain incorrect information.
You are denied insurance because of incorrect information in your medical records.
You are contacted by a health care organization notifying you that your information was involved in a data breach.
During a medical appointment the staff incorrectly notes information about you such as a procedure you never had, medications you have not been prescribed, an incorrect birthday, address, or date of birth.
Why Would Someone Steal Your Medical Information?
To make a profit by selling the information to criminals.
To obtain medical care, medical devices, and prescriptions in your name.
To apply for Medicare or Medicaid benefits in your name.
To file false insurance claims.
To receive and sell prescription medications.
Consequences of Medical Identity Theft
You get billed for medical procedures, office visits and hospital services the criminal received. Proving the charges are fraudulent can cost time and money.
Medical identity theft can go unnoticed for some time, often victims will not be aware that anything is awry until they visit the doctor or hospital.
You are in danger of receiving a misdiagnosis, incorrect treatment, or delays in care due to your medical records being altered.
You could face criminal charges if someone steals your information and uses it to commit a crime in your name.
You could be denied care because the criminals have obtained care in your name and your insurance coverage limit has been reached.
Your credit is damaged due to unpaid medical bills.
You can be denied a loan due to poor credit.
When your medical records are stolen your medical information can be exposed to others which can have undesirable consequences.
When thieves use your information to file fraudulent claims it increases the cost of medical care for everyone due to increased insurance rates.
You may encounter significant financial costs including identity protection, legal fees, and medical services and medications due to a lapse in insurance coverage while you recover from the theft.
How to Protect Yourself
Don’t share your medical or insurance information with anyone, including family members and friends.
Never answer phone calls, text messages or email messages from people you don’t know. Never provide anyone with your personal information including insurance and Medicare numbers.
Avoid offers for free medical services or products.
Stay current on publicized health care or insurance data breaches.
Shred all documents that contain personal information before throwing them away.
Check your credit reports frequently for errors.
Review EOBs, bills and other communication from insurers and medical providers. If you find inaccurate information notify your insurance company/Medicare and your medical providers immediately.
Once a year request a copy of your full list of benefits paid by your insurance provider. Review the list and report any inaccuracies.
Each time you are provided medical care request a copy of your records at the time of service. Build a medical records database and keep it updated.
Sign up with your insurance company, Medicare, and your medical providers for online access. Log in regularly and review your information. Most medical providers now have online portals where you can review and download your medical records and other information.
Use a different username and password for each site you visit.
Use a password manager to store and protect your passwords.
Freeze your credit with the three major credit bureaus, Equifax, Experian and TransUnion.
If You Are the Victim of Medical Identity Theft
File a police report, this will protect you if your information is used to commit fraud. Get a copy of the policy report.
Report the crime to your insurance company\Medicare.
Report the crime to all medical professionals who care for you.
File a complaint with the Federal Trade Commission (FTC) https://www.ftc.gov/
File a report with the U.S. Department of Health and Human Services Office of Inspector General https://oig.hhs.gov/fraud/report-fraud/
Get a copy of your credit reports from Equifax, Experian and TransUnion. Go to https://www.annualcreditreport.com/index.action You are entitled to a free annual copy from each credit bureau. Check your reports for any errors and report them if found.
Report the crime to the Social Security administration. Often if your medical records have been compromised, they have stolen other information as well.
The Tech Minimalist 