Ex-Microsoft worker arrested for illegally stealing the data of 1M patients from Geisinger's systems

Pennsylvania-based healthcare provider Geisinger said it experienced a data security incident that involved a former employee at a third-party technology service provider illegally accessing and copying the data of over a million patients.

 

In an announcement, Geisinger said that on November 29, it identified that an ex-employee of Nuance Communications had accessed Geisinger patient data, two days after the employee was terminated.

 

Microsoft-owned Nuance Communications is a IT service provider for Geisinger and has access to the healthcare provider’s patient records.

 

Immediately after being notified, Nuance permanently disconnected its former employee’s access to Geisinger’s records and an investigation was launched to determine the scope of the incident.

 

Through its investigation, Nuance determined the ex-employee had accessed and taken information pertaining to more than one million Geisinger patients. The compromised data included names, dates of birth, addresses, admit and discharge or transfer codes, medical record numbers, race, gender, phone numbers and facility name abbreviations.

 

“No claims or insurance information, credit card or bank account numbers, other financial information, or Social Security numbers were inappropriately accessed by the company’s former employee,” Geisinger said.

 

The healthcare provider added that the investigation is now complete and the former Nuance employee has been arrested and is facing federal charges.

 

Jonathan Friesen, Geisinger chief privacy officer, said, “Our patients’ and members’ privacy is a top priority, and we take protecting it very seriously.

 

“We continue to work closely with the authorities on this investigation, and while I am grateful that the perpetrator was caught and is now facing federal charges, I am sorry that this happened,” Friesen added. Max Vance, the former Nuance employee, now faces federal charges with Chief U.S. District Judge Matthew W. Brann at the U.S. Middle District Court in Williamsport scheduling jury selection for August 5.

 

Geisinger has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and state attorney general.