Is your doctor's office the most dangerous place for data?

Pioneer Press ^ | 2-9-15 | Tom Murphy And Brandon Bailey

[TurboZamboni]

Everyone worries about stolen credit cards or hacked bank accounts, but just visiting the doctor may put you at greater risk for identity fraud.

Those medical forms you give the receptionist and send to your health insurer provide fertile ground for criminals looking to steal your identity, since health care businesses can lag far behind banks and credit card companies in protecting sensitive information. The names, birthdates and — most importantly — Social Security numbers detailed on those forms can help hackers open fake credit lines, file false tax returns and create fake medical records.

"It's an entire profile of who you are," said Cynthia Larose, chair of the privacy and security practice at the law firm Mintz Levin in Boston. "It essentially allows someone to become you."

Social Security numbers were created to track the earnings history of workers in order to determine government benefits. Now, health care companies are, in some cases, required to collect the numbers by government agencies. They also use them because they are unique to every individual and more universal than other forms of identification like driver's licenses, said Dr. Ross Koppel, a University of Pennsylvania professor who researches health care information technology.

But once someone creates a stolen identity with a Social Security number, it can be hard to fix the damage. A person can call a bank to shut down a stolen credit card, but it's not as easy of a process when it comes to Social Security numbers.

[TurboZamboni]

which is why you need lifelock super deluxe advanced protocol with added lasers.

[mad_as_he$$]

I never give my SSN to Dr’s office; nor do I give them a copy of my drivers license. Insurance card is all they get.

[CGASMIA68]

I listen closely to lifelok ads and there are some pretty specific stealthy disclaimer words dotted through out..If, maybe, could be and “our network” type stuff.

[Paco]

People don't realize how vulnerable their information is. Rule of thumb: if it can be accessed through a browser (IE, Firefox, Chrome, etc.) it is vulnerable.

For an excellent discussion of hacking (with reference to medical records) and what to do about it view Dr. Steve Belovich on Youtube: You got it. Hackers want it. What's your plan? How to fight and win the new war.

[deweyfrank]

Many are on Medicare. They have no choice giving their SS# to the Dr. because their Medicare number is same as SS#.

[AmericaUnite]

I never give my SS#, but I’m < 2 years away from what I believe is mandatory Medicare. Scarey.

[goodnesswins]

I tried that in about 1992...But when I got to my referral specialist...they ALREADY had it...I have tried not to since....but it’s a battle

[oh8eleven]

I’m < 2 years away from what I believe is mandatory Medicare.
I don't believe it's mandatory. Googled and found this:

According to the Social Security Administration, Medicare coverage is mandatory at age 65 only for
employees of state and local governments who were hired or rehired after March 31, 1986.

I also know I had free healthcare coverage when I retired from my employer and it had nothing to do with Medicare.
Unfortunately, the company dropped it the year I retired (luck of the Irish).

[loungitude]

.

[Uncle Miltie]

I never give doctors my ssn.

[Tired of Taxes]

I was a victim of identity theft a few months ago. And I have reason to believe the info was stolen from my medical records.

It takes a special kind of low-life piece of scum to steal the identity of a hospital patient.

[Grampa Dave]

99.999% of insurance cards have your SS number.

If you use any insurance card to pay for health care, they have your SS#.

The only way to avoid this is to pay cash before treatment or give them a credit card for payment. We have some younger relatives in great health. When they need some rare medical treatment, they use their credit card or cash.

[AmericaUnite]

I only know what my slightly older cousin and my internet search found. If you don’t take Medicare, many insurance companies drop you at 65. I work part time and get my insurance through my husband. He’s a year younger and works for a large company. Chances are good my cousin is correct as her husband worked for a large company before retirement.

[Grampa Dave]

My wife and I in the past two+ years can verify your concerns re medical records.

For decades my wife was the lead/head RN in a FP medical office. For a long time, the turn over of receptionists was high. The receptionist in medical office is often where personal info can be stolen and abused.

Add to that problem, other non office people who had access to the office, like cleaning people, when the staff wasn’t there.

Basically, the doctor gave us free medical treatment, so there was no need for our SS # . So they didn’t need our #’s.

My wife and I needed some surgery in the past few years. The info we had to give the receptionists was scary.

Our FP retired, and we went to new FP in a group. Again the data we gave the office was scary. Then, when we tried to log on to the site, we got warnings from Norton/Comcast stating the site was not secure. Our new FP, didn’t believe me re the warning, and I made a print screen copy and showed him. He used Comcast and Norton at home. I asked him to try it on his medical record on their company site. He got the same warning. He hammered their IT company. Now the site is secure.

[FarmerW]

Very few insurance cards contain the ssn anymore. They all stopped that about ten years ago.

Producing picture id is sadly necessary. Fraud is very common with multiple people attempting to use the same insurance policy.

[mad_as_he$$]

Odd. I have never seen an insurance card with my SSN on it.

[Grampa Dave]

Thanks to both of you, FR again serves as a great sounding board re issues like the requiring of SS numbers to get medical care.

My wife and I are both over 75, and we are on Medicare for over a decade. Since we went on Medicare, we are required to submit our numbers which are on our insurance cards, Blue Cross and Medicare. So, we have submitted our numbers for elective surgeries, ER treatment and other medical costs for over a decade.

After reading your good replies, I did a quick Google survey of the laws re requirement of SS #’s for health care:

Apparently, there are no Federal Laws banning the requirement of SS #’s to get health care except for MediCare..

The states can pass such laws, and some have passed laws banning this requirement unless you get MediCare.

I would appreciate a heads up on what you come up with and any links.

Someone stealing another’s SS# is a terrible crime. We are advising our younger immediate family, nephews and nieces to do what mad as he$$ suggests, pay cash and never give out your SS #.

Fortunately, our younger heirs/nephews/nieces have similiar genetic histories of good health and seldom need any medical care besides an acute treatment like stiches or a steriod shot for severe allergies. So walk in clinics are good choices for them. They pay with cash or a credit card and never pass on their SS #.

Thanks again
Dave