This insider then shared the PII with another person. The identity thefts were discovered during an investigation by the State Attorney’s Office, U.S. Secret Service and Internal Revenue Service.
"Names and Social Security numbers of 261 people were illegally photographed at [the clinic] and then transmitted to another person." - court documentsUnfortunately, as is too often the case, these identity thefts were discovered by law enforcement rather than the organization holding the PII. Organizations seeking to proactively detect identity theft, even when it is done using a phone to take photos of a computer screen, can utilize low-cost on-demand SaaS analytics services.
Learn how to proactively detect identity theft and unauthorized breaches of data privacy, even by authorized users - with no hardware and no on-site software.Sources:
(a) Office intern at Jacksonville primary care center charged with ID theft - www.Jacksonville.com, 01/24/2015