DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Former Cedar Rapids Hospital Employee Sentenced for Accessing Ex-Boyfriend’s Medical Records

Posted on June 23, 2021 by Dissent

A former Cedar Rapids hospital employee, who wrongfully accessed and distributed her ex-boyfriend’s medical records, was sentenced on June 14, 2021.  Jennifer Lynne Bacor, age 41, from Las Vegas, Nevada, received probation after pleading guilty to one count of wrongfully obtaining individually identifiable health information under false pretenses.

In a plea agreement, Bacor admitted she was employed as a patient care technician at a Cedar Rapids hospital.  Bacor was authorized to access individually identifiable health information but only as necessary to provide services to her patients.  In 2017, Bacor’s ex-boyfriend was repeatedly treated at the same hospital.  On multiple occasions between April and October 2017, Bacor used her login credentials to access her ex-boyfriend’s protected private health information even though he was not one of her patients.  In September 2017, Bacor took a picture of a medical photograph that showed one of her ex-boyfriend’s injuries and sent the picture to a third person.  The third person then sent the picture to the ex-boyfriend and others on Facebook messenger along with taunting language and emojis.

Bacor was sentenced in Cedar Rapids by United States District Court Judge C.J. Williams.  Bacor was sentenced to five years of probation and fined $1,000. During her probationary term, Bacor will be restricted from employment in which she would have access to private medical information of others.  In sentencing Bacor, Judge Williams observed that Bacor had “weaponized” her ex-boyfriend’s private medical information.

The case was prosecuted by Assistant United States Attorney Tim Vavricek and investigated by the Department of Health and Human Services, Office of Inspector General.  Court file information at https://ecf.iand.uscourts.gov/cgi-bin/login.pl.  The case file number is 20-CR-77.

Source: U.S. Attorney’s Office, District of Iowa


Related:

  • Safaricom-Backed M-TIBA Victim of a Possible Data Breach Affecting Millions of Kenyans
  • Another plastic surgery practice fell prey to a cyberattack that acquired patient photos and info
  • NY: Gloversville hit by ransomware attack, paid ransom
  • Two U.K. teenagers appear in court over Transport of London cyber attack
  • ModMed revealed they were victims of a cyberattack in July. Then some data showed up for sale.
  • Protected health information of 462,000 members of Blue Cross Blue Shield of Montana involved in Conduent data breach
Category: Health DataInsiderU.S.

Post navigation

← Baltimore County Police Officer charged with trying to stealing dead woman’s identity
City of Liege, Belgium hit by ransomware →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Suspected Russian hacker reportedly detained in Thailand, faces possible US extradition
  • Did you hear the one about the ransom victim who made a ransom installment payment after they were told that it wouldn’t be accepted?
  • District of Massachusetts Allows Higher-Ed Student Data Breach Claims to Survive
  • End of the game for cybercrime infrastructure: 1025 servers taken down
  • Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded
  • St. Thomas Brushed Off Red Flags Before Dark-Web Data Dump Rocks Houston
  • A Wiltshire police breach posed possible safety concerns for violent crime victims as well as prison officers
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Almost two years later, Alpha Omega Winery notifies those affected by a data breach.
  • Court of Appeal reaffirms MFSA liability in data leak case, orders regulator to shoulder costs

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Lawmakers Warn Governors About Sharing Drivers’ Data with Federal Government
  • As shoplifting surges, British retailers roll out ‘invasive’ facial recognition tools
  • Data broker Kochava agrees to change business practices to settle lawsuit
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Changes in the Rules for Disclosure for Substance Use Disorder Treatment Records: 42 CFR Part 2: What Changed, Why It Matters, and How It Aligns with HIPAAs

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.