Arkansas Blog

I would say they're holding bigger fish for questioning or the round-up is spreading into other states by virtue that the release came 30 days after the arrest.

I hope they get them on a med-records breach, and the feds decide to hang them out to dry via HIPPA, but that is unlikely. The government needs to start nailing more of these bastards (and the health care providers who don't implement secure systems to prevent this from happening, if they used unauthorized access levels (an orderly having access to credit card numbers from accounting for example)) to the wall, and less folks for having a few ounces of pot on them when some podunk county cop pulls them over for 'speeding', like what happens in the outer counties of AR on the freeways.

why use medical records when the Pulaski County Clerk provides SSN's to the public. Well, till he was informed he was violating state law that is.

My Grand Mother called me Monday night after getting a letter from Baptist Hospital telling her that her identity might have been compromised. She was completely terrified and had no idea what to do. The package of information that Baptist sent to her was too confusing for a non-techie 80 year old woman to fully understand.

Something that was missing from the packet was the promise by Baptist Hospital to pay for her credit monitoring for 1 year. I was under the impression that this was required for known data breaches. Maybe not for non-profits (a non-profit hospital -- what a joke) or for religious funded things.

At least the cops are doing something.
About a year ago, a local woman managed to acquire my debit card number (not the card, just the number....I'm betting from a store that I had recently been to) and charged over $5,000 to it.
I contacted the LR police and filed a report and let my bank know what happened.

B of A treated me like a criminal the entire time. They were not interested in finding out who used my number, they really wanted to prove that I was committing fraud. Yeah B of A!!!

The LRPD did nothing (or at least they would not admit to doing anything) and the detective who had my case would never call me back. So, I went on the offensive. A little detective work on my end and I had found out who the thief was and had the merchants behind me to swear that we had the right woman.

We told the LRPD. Guess what happened. NOTHING. We were completely ignored by the LRPD who had more important crimes to take care of. The LRPD blew off the merchants and blew off me.
So, a known thief gets away. Two local merchants have to take a combined $5,000 hit to their bottom line (the thief had walked away with the merchandise) and the LRPD continue to do whatever it is that they do.

Kretara credit monitoring is NOT requred by any current law. It is a common practice that many organizations (public and private) offer when this situation occurs. Medical records have a lot of very sensitive information as it is. When you add in that most healthcare entities track you through their system with your SSN, that adds more. If you pay even ONE bill with a credit or debit card then you've just made THAT part of your "medical record" as well. Most hospitals do have good people in IT, but they have limited resources. Combine that with employees determined to satisfy their curiousity (at best) and their job gets harder.

"Most hospitals do have good people in IT, but they have limited resources."

Uh, yeah. And some hospitals hire convicted embezzlers at the request of a family member. Of course, said convict will have no access to money, so it's not a problem.
You hear me? It's not a problem! It's not!

Absolutely Doigotta. I read the Demo-Zette article and the perp fully intended to misuse her access to patient information to do bad things. That is incredibly hard for anyone to fix.