Prunchunas assured the recipients that there was no immediate indication that their personal information had been used for anything other than fraudulent insurance claims.
He said hospital officials had no knowledge of any illegal activity until alerted recently by prosecutors.
For The Record
Los Angeles Times Thursday, December 25, 2008 Home Edition Main News Part A Page 2 National Desk 1 inches; 53 words Type of Material: Correction
Privacy breach at Cedars-Sinai: An article in Tuesday's California section on a former Cedars-Sinai Medical Center billing worker who allegedly used the identities of patients to defraud insurance companies reported that he was arrested by the Los Angeles County Sheriff's Department. James Allen Wilson was arrested by the district attorney's Bureau of Investigation.
"We are deeply concerned and troubled about any privacy breach, and expect that you will feel similarly," Prunchunas said. "I would like to personally apologize for the fact that a former employee was apparently involved in this criminal activity."
Wilson worked in Cedars-Sinai's workers' compensation accounts department from January 2003 and until March 2007, when he left the hospital for reasons unrelated to the case, Cedars-Sinai spokeswoman Elise Anderson said. She declined to elaborate, citing the hospital's obligation to protect employees' privacy.
Because of the ongoing investigation, district attorney's officials refused to discuss details of the case against Wilson, including the affected insurance companies.
According to the hospital's letter, prosecutors told the hospital that Wilson set up a fake laboratory company. He allegedly used the names of actual workers' compensation beneficiaries to submit claims for services that were never performed at the fictitious lab, the letter said. The insurers sent payments by check to a post office box that Wilson set up, the letter said.
When investigators searched Wilson's home at the time of his arrest, they found the records of legitimate workers' compensation claims belonging to 1,005 patients, Anderson said. By Monday, few of those patients had responded to the hospital's letter. Those who contacted the hospital reported that they had suffered no personal financial losses, Anderson said.
When a patient's medical records are compromised, it can hurt more than their wallets, experts warn. Victims of this kind of fraud face a greater risk of injury if doctors make treatment decisions based on incorrect information contained in their records. Many employers also demand access to medical records when making hiring, promotion or benefits decisions, according to the nonprofit Patient Privacy Rights Foundation.
The wife of one man who received the letter said they felt doubly victimized, first by the injury on the job and now by the theft of his personal details. She and her husband asked not to be identified because they have both suffered work-related injuries and she is still in the process of seeking compensation for care.