Medical company's data breach affects millions in NY. How you can prevent identity theft

Emily Barnes, New York State Team
·2 min read

About four million New Yorkers were affected by a medical transcription companies' data breach earlier this year and New York Attorney General Letitia James is urging impacted individuals to take steps to protect themselves from potential identity theft.

Perry Johnson & Associates, a Nevada-based company that provides transcription services to health care organizations and physicians for dictating and transcribing patient notes, became aware of a breach affecting their systems in May.

The data impacted includes some social security numbers and insurance and clinical information from medical transcription files.

In New York, Northwell Health, which has locations throughout Westchester County, New York City and Long Island, and Crouse Health in Syracuse were affected.

Millions of New Yorkers were impacted by a medical transcription company's data breach earlier this year.
Millions of New Yorkers were impacted by a medical transcription company's data breach earlier this year.

Most individuals affected by the breach have been notified, according to the state Attorney General's office.

"I urge all New Yorkers affected by this data breach to stay alert and take these important steps to protect themselves," James said in a written statement last week. "Bad actors can use the stolen information to impersonate individuals or case financial harm. Identity theft is a serious issue, and my office will continue to take action to keep New Yorkers safe."

What those affected can do to protect themselves

The Attorney General's office said if you have been a victim of medical identity theft, consider filing a report with the Federal Trade Commission.

Attorney General James also offered these tips to those affected by the breach:

  • Monitor your credit. Credit monitoring services track your credit report and alert you, typically within 24 hours, whenever a change is made, such as a new account or large purchase.

  • Consider placing a free credit freeze on your credit report. While the freeze is in place, identity thieves will not be able to open a new credit account in your name. You can place a credit freeze by contacting any of the three major credit bureaus, such as Equifax, Experian or TransUnion.

  • Place a fraud alert on your credit report. Fraud alerts tell lenders and creditors to take extra steps to verify your identity before issuing credit. To place a fraud alert, contact any of the three major credit bureaus.

  • Obtain copies of your medical records. To get copies of your medical records, contact your doctors, clinics, healthcare providers, pharmacy and insurance company and review the records for anything you do not recognize. After reviewing, report any errors and ask for corrections from your health care providers.

  • Contest unrecognized medical billing. Challenge anything you don't recognize as wrongdoers may receive medical services in your name where you receive the bill.

  • Inform your insurance company. Let your insurance provider know of any suspected fraud and find out if they have specific protocols from these types of situations. If it's related to Medicare, contact the U.S. Department of Health and Human Services Office of Inspector General.

Emily Barnes is the New York State Team consumer advocate reporter for the USA TODAY Network. Contact Barnes at ebarnes@gannett.com or on Twitter @byemilybarnes.

This article originally appeared on Rochester Democrat and Chronicle: Millions in NY impacted by data breach at medical transcription group