The digitization of healthcare is changing the face of fraud. With the growth of electronic health records (EHRs), online patient portals and virtual clinics, a wealth of sensitive medical information is available across multiple digital channels and while hackers and cybercriminals pose a massive risk to this information, it’s not just “outside” fraudsters that are raising concerns.

Increasingly, insider threats are putting patient data at risk – employees within a healthcare organization can often access a patient’s protected healthcare information (PHI) such as medical histories or personally identifiable information (PII) such as social security numbers and payment card data – without a valid reason.