Medical Identity Theft in New Jersey: Fixing Compromised Health Records and Fraudulent Bills

When most people think of identity theft, they worry about stolen credit cards. However, medical identity theft is arguably the most dangerous form of fraud. If someone uses your name and health insurance to receive medical treatment in New Jersey, their medical history becomes mixed with yours. This can lead to life-threatening errors during your future medical treatments and saddle you with tens of thousands of dollars in fraudulent hospital bills. Whether you live in Hackensack, New Brunswick, or Cherry Hill, fighting back requires navigating complex healthcare privacy laws. We recommend finding a specialized healthcare privacy lawyer in our USA Lawyer Directory to protect your physical and financial health.

The Hidden Dangers of Medical Identity Theft

A compromised medical file is a ticking time bomb. Because hospitals rely on electronic health records, false information inputted at one facility can rapidly spread to all of your doctors across the state.

Drug Addicts Using a Victim's ID to Get Prescriptions

A common scenario in New Jersey involves individuals suffering from addiction stealing an ID or insurance card to obtain controlled substances. If a thief uses your identity to get prescriptions for opioids, your medical record will flag you as a drug seeker. If you later end up in a legitimate accident, doctors may refuse to prescribe you necessary pain medication, wrongly believing you have a history of severe substance abuse.

Unauthorized Medicaid and Medicare Billing

Organized crime rings often use stolen identities to bill government healthcare programs. They may bill Medicaid or Medicare for expensive motorized wheelchairs, surgeries, or therapies that you never received. Not only is this tax fraud, but if you later actually need these specific treatments, the New Jersey Department of Human Services, Trenton or Medicare may deny your legitimate claim, stating that you already received the equipment or exhausted your benefit limits.

Suing New Jersey Hospitals for Insider Data Breaches

Sometimes, medical identity theft is an inside job. Hospital employees have been caught selling patient data on the dark web. Under the 42 U.S.C. § 1320d (HIPAA) and the N.J. Stat. § 56:8-163 (New Jersey Identity Theft Protection Act), medical facilities have a strict legal duty to safeguard your data. If a hospital in New Jersey failed to protect your health records, you may have grounds to sue the facility for negligence and breach of privacy, forcing them to pay for your identity restoration.

How to Fix Your Compromised Health Records

Correcting a polluted medical file is much harder than disputing a credit card charge. Medical providers are naturally hesitant to alter health records due to liability concerns. You must use federal law to force their hand.

Step 1: Demand an Accounting of Disclosures

Under HIPAA privacy rules, you have the right to request a formal "Accounting of Disclosures" from your health insurance provider and any hospital where the fraud occurred. This document will show you exactly who has accessed your medical records and where the fraudulent files were sent. This step is critical for mapping out everywhere the thief's medical history has spread.

Step 2: Requesting Copies of Your Complete Medical File

Next, you must request a full, unedited copy of your medical records from the compromised facilities. Review these files meticulously. Look for unfamiliar surgeries, incorrect blood types, wrong allergy listings, or doctor visits you did not attend. Make a highly detailed list of every single error.

Step 3: Forcing Corrections and File Separation

Submit a formal, written request for amendment to the hospital's privacy officer. Do not simply ask them to 'delete' the false records. From a legal standpoint, you must ask the hospital to separate the fraudulent medical history from your actual medical file. If the hospital refuses, citing their own internal policies, your attorney can intervene and compel compliance under federal regulations.

Step 4: Filing Complaints with State and Federal Agencies

If the medical provider is uncooperative, you must file an official complaint. You can submit Form HHS-700, FED, HHS Office for Civil Rights, Health Information Privacy Complaint directly to the U.S. Department of Health and Human Services, Office for Civil Rights, Washington. Additionally, you should file a fraud report with the New Jersey Division of Consumer Affairs, Newark.

How Much Does it Cost to Fix?

Requesting your medical records and filing HIPAA complaints are generally free or involve small administrative copying fees. However, resolving complex medical identity theft often requires a lawyer. Legal fees can range from $3,000 to $7,500 for an attorney to navigate the hospital bureaucracies and force record separations. If the theft resulted from a hospital data breach, you may be able to join a class-action lawsuit or hire a lawyer on a contingency basis, meaning you pay nothing upfront.

How Long Does the Process Take?

Under federal HIPAA privacy regulations (45 C.F.R. § 164.526), medical providers have up to 60 calendar days to respond to a request to amend or separate your medical records, with a single 30-day extension permitted (up to 90 days total). Completely isolating the fraudulent files across all the different pharmacies, clinics, and insurance databases in New Jersey can take anywhere from 6 to 12 months of constant vigilance.

Frequently Asked Questions (FAQ)