Medical Identity Theft: What It Is, How It Happens, and How to Recover

What Is Medical Identity Theft?

Medical identity theft occurs when someone steals your personal and medical information to commit fraud, such as receiving healthcare services or medications under your name. Unlike regular identity theft, this form of fraud targets medical records and insurance claims, leading to severe consequences like incorrect diagnoses, denied coverage, or even life-threatening errors in treatment.

Key Consequences:

Incorrect medical records: Fraudulent entries can mislead healthcare providers.
Financial liability: Victims may face unexpected bills or insurance denials.
Long-term damage: Errors in records can persist for years, complicating future care.

How Medical Identity Theft Happens

Thieves exploit vulnerabilities in healthcare systems, often through:

1. Data Breaches

Hackers target hospitals, clinics, or pharmacies with unsecured databases.
Example: A 2023 breach exposed 10 million patient records, including Social Security numbers and medical histories.

2. Phishing and Social Engineering

Scammers trick employees or patients into sharing login credentials or personal details.
Example: A phishing email mimicking a hospital’s IT department could steal access to patient portals.

3. Stolen Wallets or Documents

Physical theft of wallets, ID cards, or medical records (e.g., from a doctor’s office).

4. Fraudulent Insurance Claims

Thieves submit fake claims to insurers, using stolen identities to receive payments.

Recovery Steps: A Step-by-Step Guide

1. Act Immediately

Contact the healthcare provider: Report the theft and request a review of your medical records.
Report to the FTC: File a complaint at www.ftc.gov to document the fraud.
Place a fraud alert: Contact one of the three major credit bureaus (Equifax, Experian, TransUnion) to flag your credit file.

2. Dispute Fraudulent Activity

Review insurance claims: Work with your insurer to dispute unauthorized services.
Correct medical records: Request corrections to any fraudulent entries in your medical history.

3. Monitor Financial and Medical Records

Credit monitoring: Use services like LifeLock or Experian to track financial impacts.
Annual medical record audits: Request a free review of your records from healthcare providers.

4. Legal and Professional Support

Consult an attorney: Seek legal help to address insurance fraud or civil liability.
Contact the HHS Office for Civil Rights (OCR): Report breaches of protected health information.

5. Prevent Future Incidents

Freeze credit: Prevent new accounts from being opened in your name.
Enable two-factor authentication: Secure online healthcare portals with additional verification.

This guide is part of a series on medical identity theft. For prevention strategies, refer to the companion article: Medical Identity Theft Prevention: How to Protect Your Health Information.