HospitalEvil
Junior Contributor
Regular Member
- Joined
- Aug 29, 2022
- Threads
- 6
- Post Replies
- 18
- Status
- away
- Last seen
I work in the health care profession (at a privately owned clinic) and have access to thousands of patient's information. Not just their medical records, but their ID, SS#, insurance Info, address, phone #, and answers to almost every security question when you think about since I know their parent's names/maiden names, hobbies, etc. I even have access to the MSR that the majority of patients use to pay with any card they choose (10% of patients use cash).
The biggest issue I see is that the program only reveals the last 4 of the card when searching up a previous transaction. I can always say that the MSR is currently not working and manually type in the card information (which has happened a few times recently due to heavy rain messing with the our internet connection). I know for all Visa cards the first 8 digits are 4610 4602. If the program saves the last 4 digits indefinitely then I just need to remember the 3rd set of digits, the expiration, and the cvv when manually typing it in. I'm really good at remembering long sequences of numbers/letters in a short period of time.
Although the patient is staring at me while I do this it provides an additional security measure because they won't think I ran off somewhere and wrote down the details. I also have a co worker who's wants in and I have known them for 5+ years and trust them completely since I've met them way before we started working together. They can come up front during the checkout process and entertain the patient by promoting something on the front counter while I type in the information. This will allow the patient to still see I am just merely typing in their details although it will also help with attaching a positive memory to the end of an appointment making it harder for a patient to want to point fingers at us first. I often get quite close to patients and know what they do for a living and can even calculate when they get paid (since a lot of patients are either really open or because a lot of them work the same profession due to the area we are located in.)
Additionally, there are 2 main types of patients we typically see. General medical patients usually pay anywhere from $15-$150. The aesthetic patients typically pay $250-$1k+. I know which patients are in a financially secure position and wouldn't notice anything missing for at least a few days. I would wait for a while to use the patient's info to lower suspicion. The goal is to have them use that card in as many transactions they can make at other retailers before I actually use the card so that they don't have an exact idea on how their info may have gotten stolen. Aesthetic patients usually come in once every 2-3 months so that could also help me out if I choose one of those patients since they don't come in weekly like most general medical patients.
Is this an elaborate plan that could actually work? What are some flaws you see?
The biggest issue I see is that the program only reveals the last 4 of the card when searching up a previous transaction. I can always say that the MSR is currently not working and manually type in the card information (which has happened a few times recently due to heavy rain messing with the our internet connection). I know for all Visa cards the first 8 digits are 4610 4602. If the program saves the last 4 digits indefinitely then I just need to remember the 3rd set of digits, the expiration, and the cvv when manually typing it in. I'm really good at remembering long sequences of numbers/letters in a short period of time.
Although the patient is staring at me while I do this it provides an additional security measure because they won't think I ran off somewhere and wrote down the details. I also have a co worker who's wants in and I have known them for 5+ years and trust them completely since I've met them way before we started working together. They can come up front during the checkout process and entertain the patient by promoting something on the front counter while I type in the information. This will allow the patient to still see I am just merely typing in their details although it will also help with attaching a positive memory to the end of an appointment making it harder for a patient to want to point fingers at us first. I often get quite close to patients and know what they do for a living and can even calculate when they get paid (since a lot of patients are either really open or because a lot of them work the same profession due to the area we are located in.)
Additionally, there are 2 main types of patients we typically see. General medical patients usually pay anywhere from $15-$150. The aesthetic patients typically pay $250-$1k+. I know which patients are in a financially secure position and wouldn't notice anything missing for at least a few days. I would wait for a while to use the patient's info to lower suspicion. The goal is to have them use that card in as many transactions they can make at other retailers before I actually use the card so that they don't have an exact idea on how their info may have gotten stolen. Aesthetic patients usually come in once every 2-3 months so that could also help me out if I choose one of those patients since they don't come in weekly like most general medical patients.
Is this an elaborate plan that could actually work? What are some flaws you see?
