Fla. breach tied back to two employees' tax fraud scheme

The Florida Department of Health in Orange County has issued a security breach notice to patients of its health centers in the area.

The breach occurred when two former employees created lists containing names, birthdates and Social Security numbers obtained from patient records, according to federal investigators. The employees have been permanently removed from access to any and all Department of Health information, according to information posted on the organization’s website. Medical information, bank accounts, credit cards or other personal information were not part of the breach.

“We are taking every precaution possible and cooperating with law enforcement to assure all records are maintained with the greatest level of security possible,” said Department of Health in Orange County Director Kevin Sherin, MD.

The Sun Sentinal identified the two former employees as Shanterica Smith and Gerald Williams. Williams’ brother, Delray Duncan, also was arrested. The breach links back to a tax fraud scheme begun back in 2011, according to the article, when the Orange County Sheriff’s Office found a handwritten list of about 150 names, Social Security numbers and birth dates.

A woman linked to that list, Tanya Fox, told detectives she was supposed to hand the list off to another person, who would use the private information to commit tax fraud.

An IRS agent discovered that more than 3,500 tax returns were filed between January 2011 and December 2012 using addresses associated with Fox. Agents determined that the sources of the information were Smith and Williams, according to court records.

Of the roughly 3,000 identity theft victims whose tax returns listed addresses associated with Fox, about 2,300 were included in the health department’s record management system.