DOJ announced indictments on October 13, 2026 in a remote IT worker conspiracy that affected more than 70 U.S. companies, including healthcare entities. The case underscores privacy and security risks tied to insider access, remote hiring, and unauthorized handling of company and potentially sensitive health-related data. For healthcare organizations, it highlights the importance of identity verification, access controls, and monitoring to reduce exposure from deceptive staffing schemes.
