It seems the Nassau county police discovered the identity thefts, not the organization that was holding the patients' PII. Unfortunately this is often the case with identities stolen from healthcare organizations.
"she stole Social Security numbers and credit card information while she worked out of a [hospital] office." - NewsdayOrganizations seeking to proactively detect identity theft and privacy data breaches, rather than learn about them from third parties, can utilize low-cost on-demand SaaS analytics services.
Learn how to proactively detect identity theft and unauthorized breaches of data privacy, even by authorized users - with no hardware and no on-site software.Sources:
(a) Winthrop-University Hospital worker charged with stealing patients' personal information, cops say - www.Newsday.com, 08/21/2015