arizona hipaa violation case

54-Month Prison Sentence in Arizona HIPAA Violation Case

June 2, 2023

Rico Prunty, a 41-years old resident of Sierra Vista, Arizona, has recently been given a 54-month prison sentence due to his involvement in identity theft and violations of the Health Insurance Portability and Accountability Act (HIPAA). This ruling highlights the critical importance of patient privacy protection and the harsh penalties for violating HIPAA regulations.

During his employment at a medical facility in Arizona, Rico Prunty engaged in unlawful activities by accessing patient medical intake forms without authorization. This breach occurred between July 2014 and May 2017, allowing Prunty to gain access to sensitive information such as names, dates of birth, addresses, employer details, social security numbers, diagnoses, and medical information.

54-Month Prison Sentence in Arizona HIPAA Violation Case

Unauthorized Access and Disclosure of Patient Information

Prunty’s actions involved unlawful accessing of patients’ protected health information (PHI), violating HIPAA regulations to safeguard healthcare data privacy and security through stringent controls on who can access and disclose it. By accessing and disclosing this sensitive data without proper authorization or a legitimate medical reason, Prunty not only breached patient trust but also compromised their privacy and exposed them to potential harm.

Identity Theft Scheme and Co-conspirators

Prunty did not act alone in his illicit activities. He collaborated with co-conspirators Vincent Prunty, Temika Coleman, and Gemico Childress. The stolen patient details were provided to these individuals, who then used them to open credit card accounts in the victims’ names. 

The authorities investigating the case found evidence of credit card manufacturing and the opening of fraudulent accounts after raiding an apartment linked to the suspects. Together, they attempted to steal over $181,000 from the victims. The intertwining of identity theft and HIPAA violations exacerbated the severity of the offenses committed. 

Identity theft represents a grave offense with far-reaching implications for the affected individuals. It often leads to enduring financial hardships, irreparable damage to credit scores, and profound emotional distress. In this particular situation, the victims not only suffered the repercussions of identity theft but also endured the violation of their medical privacy perpetrated by a healthcare professional whom they had trusted.

54-Month Prison Sentence in Arizona HIPAA Violation Case

Prosecution and Sentencing

The seriousness of the crimes committed by Prunty and his co-conspirators led to their arrest and subsequent prosecution. Rico Prunty pleaded guilty to aggravated identity theft and criminal HIPAA violations related to the unauthorized access and disclosure of PHI. The maximum penalty for HIPAA violations is a jail term of 10 years, while aggravated identity theft carries a mandatory minimum sentence of 2 years, to be served consecutively with other felony charges.

Senior U.S. District Court Judge James Moody oversaw the sentencing and considered the gravity of the crimes and their impact on the victims. In light of this, Prunty was sentenced to 54 months in federal prison along with 2 years of supervised release. The sentence serves as a strong deterrent to others who might consider compromising patient privacy and emphasizes the seriousness of how the legal system views such offenses.

Impact of Prunty’s Arizona HIPAA Violation Case on Victims

The repercussions of Rico Prunty’s criminal HIPAA violation case and identity theft scheme extend far beyond the legal consequences. The victims, whose sensitive personal and medical details were exposed, are left to deal with the aftermath of potential identity theft, financial loss, and emotional distress. The breach of trust by a healthcare professional adds another layer of harm, undermining patient confidence in the healthcare system. Restitution, in this case, acknowledges the losses suffered by the victims. 

Besides time in federal prison, Prunty was ordered to pay $132,521.98 in restitution, which is meant to compensate the victims for the damages incurred as a result of the identity theft scheme. The restitution may not fully rectify the harm done. Instead, it serves as a step toward financial recovery while acknowledging how these crimes have negatively impacted the victims’ quality of living.

54-Month Prison Sentence in Arizona HIPAA Violation Case

Sentencing of Co-conspirators and Restitution Obligations

The co-conspirators involved in this crime were also sentenced for their roles. Vincent Prunty, Temika Coleman, and Gemico Childress pleaded guilty to various charges, including wire fraud, mail fraud, and aggravated identity theft. Vincent Prunty received a sentence of 154 months, and Gemico Childress up to 134 months. Temika Coleman received a sentence of 121 months. 

Besides serving prison time, the co-conspirators were ordered to pay the amount of $181,835.77 as restitution. By holding those responsible accountable and ordering them to pay restitution, the legal system aims to bring justice for victims while sending a clear message that such crimes won’t be tolerated.

Prioritizing Patient Privacy in the Healthcare Landscape

The outcome of this criminal HIPAA violation case brings to the forefront the importance of safeguarding patient privacy and the grave consequences that transgressors face. When patient information is accessed and shared without authorization, it breaches the trust bestowed upon healthcare professionals and undermines the healthcare system’s very foundation.

This case is a powerful reminder of the utmost significance of protecting patient data. It also reiterates the dedication to holding individuals accountable for violating patient privacy and engaging in unlawful acts.

Kent Cañas

Kent is a content strategist currently specializing in HIPAA-compliant online fax. Her expertise in this field allows her to provide valuable insights to clients seeking a secure and efficient online fax solution.

More great articles
hipaa-compliant backup solutions
5 Best HIPAA-Compliant Backup Solutions

Here are the top HIPAA-compliant backup solutions for protecting sensitive healthcare data.

Read Story
Privacy Breaches and Data Compromises in Healthcare: Recent Incidents
Privacy Breaches and Data Compromises in Healthcare: Recent Incidents

The recent privacy breaches involving three healthcare institutions emphasize the urgent need for robust security measures and proactive strategies.

Read Story
rural Illinois hospital
Rural Illinois Hospital Links Closure to Ransomware, Financial Struggles

A rural Illinois hospital cites a ransomware attack as part of the cause of their recent closure.

Read Story
Subscribe to iFax Newsletter
Get great content to your inbox every week. No spam.

    Only great content, we don’t share your email with third parties.
    Arrow-up