All About Cookies is an independent, advertising-supported website. Some of the offers that appear on this site are from third-party advertisers from which All About Cookies receives compensation. This compensation may impact how and where products appear on this site (including, for example, the order in which they appear).
All About Cookies does not include all financial or credit offers that might be available to consumers nor do we include all companies or all available products. Information is accurate as of the publishing date and has not been provided or endorsed by the advertiser.
The All About Cookies editorial team strives to provide accurate, in-depth information and reviews to help you, our reader, make online privacy decisions with confidence. Here's what you can expect from us:
Today, medical identity theft is on the rise. This unfortunate trend makes your personal information, especially your medical and insurance profile, a hot commodity in the criminal underworld. Fraudsters will steal your medical or health insurance information, assume your identity, and attempt to receive care, purchase equipment, get drug prescriptions, or file false medical insurance claims in your name.
Medical identity theft is particularly insidious because it's harder to detect and can often go unnoticed for years. Worse yet, federal laws limiting consumer liability don't protect victims, and they can be held responsible for the fraudulently accrued debt. Also, your health can suffer from altered medical records, and you can even face criminal prosecution if prescription drugs were purchased, stockpiled, and sold using your identity.
The odds of becoming a victim are increasing rapidly, with medical identity theft cases reported to the Federal Trade Commission (FTC) increasing from about 6,800 in 2017 to nearly 43,000 in 2021.[1]
Read on to learn how to prevent or, if necessary, recognize and quickly combat medical identity theft before it negatively impacts your life.
To commit medical identity fraud, criminals need access to your personally identifiable information (PII), including full name, date of birth, Social Security number, health insurance number, and Medicare number.
Medical identity theft happens when this information lands in criminal hands due to negligence or malicious activity. Once the scammers have your personal information, they can assume your medical identity and receive medical procedures, medication, or insurance benefits as if they were you.
Medical identity theft can originate from inside, outside, or friendly sources.
Insider fraud occurs when someone inside the health care or insurance system violates professional trust and maliciously allows unauthorized parties access to confidential patient information — for a price.
Personally identifiable medical information currently draws a high price on the dark web black market, which can be tempting for unscrupulous health care providers or insurance professionals with access to patient records. This type of internal attack has the best chance of succeeding in the health care sector, with a success rate of 66%, according to Statista.
How prevalent is insider fraud? Here are some unsettling numbers to consider — according to a 2018 Accenture survey, 18% of health care employee respondents are willing to sell personal patient data to unauthorized parties, and 24% of the respondents said they know of someone in their organization who has sold their credentials or access to an unauthorized outsider.
Outsiders employ various methods and techniques to obtain personal medical information. It can be as simple as digging through trash to find carelessly discarded medical files, bills, or insurance cards.
Outside scammers also use phishing emails, calls, and texts to convince individuals to provide their PII. These attempts appear to come from legitimate sources, such as someone from your doctor’s office, and often offer deals or specials to lure unsuspecting customers. If activated, phishing emails can contain malware links providing unrestricted access to patient information.
Hackers also target health care or insurance organizations for large-scale network data breaches, which can allow unauthorized access to the personal records of all patients on file.
Despite the less ominous name, medical identity theft resulting from "friendly" fraud can be just as dangerous as threats from inside or outside sources. Friendly fraud occurs when someone the patient knows, either a family member or friend, uses their trusted status with the patient to access their medical identification and benefits.
Medical identity theft resulting from friendly fraud is common. Many patients feel comfortable trusting relatives or friends with their personal medical identification information. A Ponemon survey indicates that half of medical identity theft victims say a family member or someone they knew used their medical identification information.
Stealing your medical identity can open up a significant number of illicit options for enterprising criminals, which include:
Don't be the unfortunate person who gets blindsided by medical identity theft and all the problems that can follow if someone commits fraud using your personal information.
There are some critical warning signs that your medical identity has been stolen and is involved in fraudulent activity. Be sure to keep an eye out for the following red flags indicating you may be a victim of medical identity theft:
If you think you may be a victim of medical identity theft, you must act fast to mitigate the potential consequences and damage. It's better to err on the side of caution and quickly take mitigative action, which should include:
Below are some recommended actions to help prevent you from becoming a medical identity theft victim. Remember to:
Medical identity theft is the act of stealing PII, such as name, date of birth, Social Security number, and health insurance or Medicare numbers, to assume another's identity and fraudulently attempt to obtain medical care, equipment, prescriptions, or insurance benefits in their name. Medical identity theft is especially dangerous because it can easily go undetected and may result in undeserved debt liability and the possibility of criminal prosecution for the victim.
Medical identity theft can result from inside, outside, or friendly origins.
Insider-driven medical identity theft occurs when malicious health care or insurance system insiders sell access to sensitive patient information.
Outside attacks come from phishing scams to trick patients or providers into releasing sensitive personal medical information or from large-scale cyber breaches of health care or health insurance providers.
Medical identity theft can also originate from "friendly" sources. This happens when friends or family members obtain and use a patient's medical profile with or without their consent.
When a fraudster gets ahold of your medical record number, they can effectively assume your medical identity and visit a medical provider, get a prescription from a pharmacy, order medical equipment, file fraudulent claims for insurance benefits, and enjoy full access to your medical record history.
Stealing your medical identity can be significantly rewarding for criminals while being extremely inconvenient and potentially costly for you. When someone steals your medical identity, you can't expect much help regarding consumer liability debt protection — you could get hit with a massive medical debt, damaged credit, and possible criminal charges.
With such high stakes and medical identity theft on the rise, everyone must look for unrecognized debt, incorrect medical records, or notifications of used-up insurance benefits.
Prevention always trumps restoration, so focus on securing personal information while being mindful of phishing scams and avoiding offers for free medical services or products. Those who remain vigilant in monitoring their credit scores and medical reports while having an action plan to combat fraud stand the best chance of safeguarding their medical identity from this type of identity theft.
Excellent identity theft protection service
Includes a password manager and VPN
Robust tools for children’s security
Provides VantageScore and not FICO score updates
