25% off all training courses Offer ends May 29, 2026
View HIPAA Courses
25% off all training courses
View HIPAA Courses
Offer ends May 29, 2026

The HIPAA Journal is the leading provider of HIPAA training, news, regulatory updates, and independent compliance advice.

Rogue Employee Steals PHI of 2,000 Pointe Medical Services Patients

A former employee of Pointe Medical Services has been accused of stealing the protected health information of patients and disclosing the data to her new employer.

The data theft came to light when a patient complained to Pointe Medical Services that contact had been made by another healthcare service provider in an attempt to solicit business. The patient was concerned that PHI had been compromised and contacted Pointe Medical Services around February 11, 2016.

An internal investigation was launched and Pointe Medical Services discovered patient information had been downloaded and copied by Kimberly Hunt, ARNP, who was previously employed by the company. That information was subsequently shared with L.A. Quinn M.D., P.A. and Carter’s Ortega Pharmacy, Inc.

Hunt is alleged to have downloaded the PHI of 2,000 patients and copied their names, phone numbers, dates of birth, appointment status, reason for appointments, insurer’s name, health plan name, and insurance account type.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

To prevent further harm, Pointe Medical Services took legal action and obtained an injunction from the courts against the former employee, Carter’s Ortega Pharmacy, and L.A. Quinn M.D., prohibiting them from using the confidential information. The courts also ordered all parties to return the stolen information and delete any copies of the data.

In an effort to further protect patient privacy, Pointe Medical Services is implementing measures to reduce the risk of future privacy breaches and has implemented stop loss measures and taken internal corrective action. Patients have been notified of the breach, although it is not believed that there is a risk of them suffering identity theft or fraud. Data is believed to have been taken with the sole purpose of soliciting patients to switch service providers. Pointe Medical Services is currently working with law enforcement and is looking to prosecute the parties concerned.

Author: Steve Alder is the editor-in-chief of The HIPAA Journal. Steve is responsible for editorial policy regarding the topics covered in The HIPAA Journal. He is a specialist on healthcare industry legal and regulatory affairs, and has 10 years of experience writing about HIPAA and other related legal topics. Steve has developed a deep understanding of regulatory issues surrounding the use of information technology in the healthcare industry and has written hundreds of articles on HIPAA-related topics. Steve shapes the editorial policy of The HIPAA Journal, ensuring its comprehensive coverage of critical topics. Steve Alder is considered an authority in the healthcare industry on HIPAA. The HIPAA Journal has evolved into the leading independent authority on HIPAA under Steve’s editorial leadership. Steve manages a team of writers and is responsible for the factual and legal accuracy of all content published on The HIPAA Journal. Steve holds a Bachelor’s of Science degree from the University of Liverpool. You can connect with Steve via LinkedIn or email via stevealder(at)hipaajournal.com

x

Is Your Organization HIPAA Compliant?

Find Out With Our Free HIPAA Compliance Checklist

Get Free Checklist