NYC Hospital Worker Charged With Stealing, Selling Info on 50,000 Patients

NEW YORK – A man who worked in the admissions department at a prestigious Manhattan hospital has been charged with stealing and selling information on nearly 50,000 patients.

The former worker at New York-Presbyterian Hospital/Weill Cornell Medical Center was arrested Friday night, shortly after the hospital announced the security breach. He was arraigned Saturday at a federal court in Manhattan.

Prosecutors said Dwight McPherson, 38, of Brooklyn, exploited his access to the hospital's computer registration system to acquire lists of patient names, phone numbers and social security numbers over a two-year period.

Authorities became aware that something was amiss when printouts of patient records were discovered in Atlanta, Ga. during an investigation by U.S. postal inspectors, according to a complaint filed by prosecutors Saturday.

McPherson confessed to a role in the identity-theft scheme when he was interrogated by agents on Friday, an inspector said in the complaint.

McPherson told agents that in 2006 he was approached by someone offered money in exchange for the names, addresses and other identifying information of male patients born between 1950 and 1970. The complaint said McPherson sold one batch of 1,000 records sometime this past December or January for $750. A second batch a short time later earned him $600, the agents said.

Prosecutors didn't reveal Saturday who was purchasing the data or why, but the court complaint said the buyers intended to use the information "in connection with illegal activity."

McPherson didn't address the charges during his brief court appearance and wouldn't speak to reporters after he was released on bond.

"He is a hard working, honest man," said his lawyer, Bob Walters.

New York-Presbyterian suspended McPherson in February after being contacted by federal investigators.

Hospital spokeswoman Myrna Manners said Friday evening that none of the stolen data contained private health information, and that the hospital was unaware of any instance where the information had been used to scam individual patients.

The hospital is in the process of contacting thousands of patients, setting up a hot line for them and offering credit monitoring services. It is also examining its procedures to prevent future thefts, Manners said.