iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
If a healthcare provider, insurer, pharmacy, laboratory, or health-information service reports a breach, act as though your exposed information could be misused—but do not assume misuse has already occurred. Read the notice, verify it through a trusted contact route, inspect your medical claims and records, obtain your credit reports, and choose a freeze or fraud alert if new-account fraud is a concern.
This guide is for U.S. consumers and follows Federal Trade Commission guidance. Medical identity theft can affect treatment, prescriptions, insurance benefits, government benefits, and credit, so checking only your bank and credit-card accounts is not enough.
What a healthcare data breach can put at risk
A breach notice means an organization says information was exposed or accessed without authorization. It does not, by itself, prove that anyone has used your identity. The notice should identify the categories of information involved and any assistance the organization is offering. Treat those details as your starting point, not as proof of a completed identity-theft event.
Recommended Free Tools
Medical identity theft can involve a person using your name, Social Security number, health-insurance account number, or Medicare number to obtain care, prescription drugs, medical devices, or insurance payments. The Federal Trade Commission explains the risks in What To Know About Medical Identity Theft.
#1 Best Overall
- 【Cross Cut & Credit Card Paper Shredder】The cross cut shredder shreds paper into 5x14mm particles, achieving P-4 level security. Shreds up to 6 sheets at once without removing staples, also handling paper clips and credit card (one at a time)
- 【Continuous Performance】The operating time is 4 minutes, with a 20-minute cooling cycle. If the shredding time exceeds 4 minutes, the overheating indicator will light up. After a 20-minute cooling cycle, it can resume operation
- 【Easy to Clean & Place】 Bonsaii shredder’s head features a handle for easy lifting; the separate 3.4-gallon bin has a clear window for quick disposal. Compact dimensions (11.81" × 7.09" × 14.26") make it perfect for home and small office spaces, fitting neatly under desks.
- 【Easy Operation & Safety Features】Auto start/stop and manual-reverse functions protect the paper shredder from the frustration of paper jams. The overheat protection function effectively extends the lifespan of the shredder, The document shredder will stop working once you lift the head, ensuring your safety.
- 【1-Year Warranty】Bonsaii offers a 1-year warranty for your shredders for home use heavy duty. If you have any questions, please feel free to contact us. We test every shredder before shipping, so you may notice some paper shreds from the testing
- Your care: Another person’s visits, diagnoses, prescriptions, allergies, or test results can be mixed into your chart. Clinicians relying on an incorrect record may make decisions using information that is not yours.
- Your benefits: Someone can use insurance or Medicare information to submit claims. You may receive a notice that benefits are exhausted even though you did not receive the services.
- Your money and credit: Unpaid medical bills can be sent to collectors or appear as unfamiliar information in a credit file. Medical misuse can therefore become a credit problem as well as a healthcare problem.
The practical distinction is exposure versus misuse. Start the protective checks now, but describe suspected services, claims, prescriptions, or debts as unfamiliar until you have verified what happened.
First steps after receiving the notice
1. Read the notice and verify the contact route
- Record the organization’s name, the incident date or discovery date if supplied, the categories of data involved, the date the notice was sent, and any deadline for assistance.
- Do not use a link, telephone number, or reply address in an unexpected email or text to investigate the incident. Instead, sign in through a website you already know is genuine or call a number from an insurance card, provider statement, or another trusted record.
- If someone calls, emails, or texts unexpectedly asking for your medical information, do not provide it during that contact. End the conversation and initiate contact through the verified route.
- Ask the affected organization what it is doing, whether your specific information was involved, how long any offered assistance lasts, and how to reach its privacy or fraud team.
The FTC’s general guidance on avoiding impersonation and unsafe contacts is in What To Know About Identity Theft. A genuine notice can still be followed by a fraudulent follow-up, so independent verification matters.
2. Use no-cost assistance the organization offers
Ask whether the breached organization provides free credit monitoring, identity-monitoring help, or identity-theft insurance. Use relevant no-cost services it actually offers, and note the enrollment deadline and the period of coverage. These services are optional tools; you do not have to buy a product simply because your information was exposed.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteThe FTC’s breach-response video, What To Do After a Data Breach, also identifies a credit freeze or fraud alert as possible additional protections. Decide between them based on your need for new credit and your tolerance for the setup steps described below.
3. Preserve a clear record of the incident
Keep the breach notice, enrollment confirmation for any offered service, claim numbers, letters, bills, and copies of messages you send. Write down dates, names or departments you contacted, and promised follow-up. A dated file makes it easier to show an insurer, provider, collector, credit bureau, or the FTC exactly what you disputed and when.
How to tell whether someone is using your medical information
Medical misuse often appears in healthcare paperwork rather than in a bank statement. Review several kinds of records because a thief may use your insurance without opening a conventional credit account.
Rank #2
- Cross-cut paper and credit card shredder cuts material into approximate 0.2 x 0.7 inches (5 x 18 mm) pieces; meets security level P-4 standards
- Shreds up to 8 sheets of 20-pound bond paper at a time; shreds credit cards (one at a time, but not suitable for metal credit cards), staples, and small paper clips
- 3 minute runtime and 30 minute cool down; if unit goes beyond max run time, it automatically shuts off to prevent overheating
- 4 mode control switch (auto/on, off, reverse, forward) and LED status indicators for power on, overheat and overload; easy to empty 3.7 gallon bin
- Quality tested: As part of Amazon Basics quality inspections, we test every shredder before shipping it, which means you may see some paper shreds from the testing
Unfamiliar explanations of benefits and bills
Compare every explanation of benefits (EOB) and provider bill with the care you actually received. Look for a facility, clinician, date, procedure, laboratory test, medical device, or prescription you do not recognize. A familiar provider name does not prove the service was yours; check the date and description against your appointments.
Prescriptions, devices, and claims you did not request
Watch for pharmacy records, prescription notices, or medical-device charges involving products you do not take or use. Contact the insurer’s fraud department about a claim, service, or prescription that is not yours. Ask what documentation it needs and request a reference number for the dispute.
Collectors and exhausted benefits
An unfamiliar medical-debt collector, a collection letter for care you never received, or a notice that your health benefits are used up can indicate misuse. Do not pay or acknowledge a disputed bill before you understand it. Contact the insurer and provider through verified channels and state precisely which service or account you dispute.
Changes in your medical record
Request records when an EOB, bill, or clinician raises a question. Look for visits, diagnoses, test results, prescriptions, or demographic details that do not belong to you. Mixed records can affect future treatment and benefits even when no debt has yet reached a credit file.
Credit monitoring cannot reveal every form of medical identity theft. Continue checking EOBs, bills, prescriptions, benefit balances, and records even if all three credit reports look normal.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Investigate and correct inaccurate medical records
Contact the insurer first about claims and benefits
- Use the fraud or identity-theft number on your insurance card or the insurer’s verified website.
- Give the claim number, date of service, provider, and reason you believe the claim is not yours.
- Ask whether the insurer can flag the account, stop or review payment, and tell you which provider records you must obtain.
- Request written confirmation of the dispute and keep copies of every document you submit.
Request records from each relevant provider
Contact the doctor, clinic, hospital, pharmacy, laboratory, or other provider connected to the unfamiliar claim. Ask for copies of the records needed to identify the error, including billing details and the relevant encounter or prescription information. You may need to contact more than one organization if the same mistake was copied into several systems.
Rank #3
- P-4 Level Security: Crosscut shredder for home office heavy duty can handle 12 sheets effortlessly per pass, make sure your important documents are securely shredded, can shred paper, credit card, staple or clips into 13/64*51/64 inches (5*20mm) tiny particles.
- 6-Minute Continuous Shredding: Based on the patented cooling system, Bonsaii paper shredder for home use heavy duty can run continuously for up to 6 minutes without worrying about overheating or slowing down, ideal paper shredder for home office use or small office use.
- Easy Operation & Safe Protection: Auto start/stop and manual-forward/reverse function protect the paper shredder heavy duty from the frustration of paper jams. Overheat protection helps you use paper shredder without worrying and prolong its lifetime. The document shredder will stop working once you lift the head, keeping you safe.
- Compact Sizes: The shredder for home office comes with a portable handle on the shredder head and a 5.5 Gal large transparent window wastebasket; with the compact size of 12.6*7.91*18.3 inches, you can place it in the corner or under the desk, it's perfect for home use or office use.
- Professional Service: Bonsaii provides 1-Year limited warranty for your shredders for home office heavy duty. If you have any questions, please get in touch with us.
If a provider refuses because the file contains another person’s private information, ask for the person named in the provider’s Notice of Privacy Practices, a patient representative, or an ombudsman. Those are the escalation routes identified by the FTC for this situation.
Dispute the error in writing
- Describe the exact entry you dispute: for example, a visit date, prescription, diagnosis, claim, or address.
- Explain that you did not receive or authorize the service, if that is true.
- Include a copy of the record with the incorrect entry clearly marked. Send a copy, not your only original.
- Use a trackable delivery method or another method that confirms receipt.
- Ask the provider to correct its file and notify other healthcare providers that may have received the same incorrect information.
The FTC states: “Your health care provider must respond to your request within 30 days and must notify other health care providers who may have the same mistake in their records.” Keep the delivery confirmation and the provider’s response. If the response does not correct the entry, use the provider’s patient representative or ombudsman process and explain that you already submitted a written correction request.
Check your credit reports and protect new credit accounts
Get and review all three reports
Obtain your free credit reports through AnnualCreditReport.com or by calling 1-877-322-8228. Review medical collection notices, unfamiliar accounts, hard inquiries, addresses, and other information you do not recognize. A medical claim can be fraudulent even when it has not appeared on a credit report, so use this review alongside your insurer and provider checks.
If a medical billing error appears in a credit file, dispute it with each affected bureau. The FTC directs consumers to use the IdentityTheft.gov “What To Do Next” steps for reporting medical billing errors to all three bureaus.
Choose between a credit freeze and a fraud alert
Both tools are free and can make it harder for a thief to open new credit, but they work differently. The choice is mainly about how much access you want to block and whether you expect to apply for credit soon.
| Protection | What happens to your credit report | How to set it up | Duration and use | What it does not replace |
|---|---|---|---|---|
| Credit freeze | Prospective creditors are blocked from accessing your report while the freeze is active. | Contact Equifax, Experian, and TransUnion separately. | Free to place or lift, available to anyone, and remains until you lift it. You can temporarily lift it for a credit application and reinstate it afterward. | It does not inspect medical claims, correct provider records, or stop someone from using health benefits. |
| Initial fraud alert | Creditors can access your report, but the alert asks them to verify your identity before granting new credit. | Request it from one national bureau; that bureau must notify the other two. | Free and lasts one year; it can be renewed. A seven-year extended alert is available to people who experienced identity theft. | It does not block report access or replace medical-record and insurance reviews. |
The FTC explains these differences in Credit Freezes and Fraud Alerts and its 2025 consumer alert, Get a credit freeze to stop identity thieves.
Rank #4
- Cross-cut paper and credit card shredder cuts material into approximate 0.2 x 1.2 inches (5 x 30 mm) pieces; meets security level P-3 standards
- Shreds up to 12 sheets of 20-pound bond paper at a time, also can shred credit cards (one at a time, but not suitable for metal credit cards), staples, and small paper clips
- 9 minute runtime and 30 minute cool down; if unit goes over max run time, it automatically shuts off to prevent overheating
- 4 mode control switch (auto/on, off, reverse, forward) and LED status indicators for power on, overheat and overload; 5 gallon bin reduces empty frequency
- Quality tested: As part of Amazon Basics quality inspections, we test every shredder before shipping it, which means you may see some paper shreds from the testing
Use the decision rule that fits your situation
- Choose a freeze when you want the strongest restriction on new-credit access and do not need an immediate application. Plan to lift it temporarily with the bureau a lender uses when you apply.
- Choose an initial fraud alert when you expect to apply for credit soon and prefer not to manage three separate freezes. The lender still has access to the report but is asked to verify that the applicant is you.
- Consider an extended alert if you have confirmed identity theft and meet the requirements described by the FTC.
Neither option prevents a criminal from submitting a medical claim, obtaining care under your identity, or altering a provider record. Keep the healthcare review active regardless of your credit choice.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsReport confirmed medical identity theft
If you find that someone used your personal information or health insurance to obtain care, prescription drugs, devices, or benefits, report the identity theft at IdentityTheft.gov and follow the personalized recovery plan. The plan can organize the reports, disputes, and follow-up appropriate to the facts you enter.
The FTC also provides a Spanish-language route at RobodeIdentidad.gov and a phone option for other languages. Use the official FTC routes rather than a number supplied by an unsolicited caller or message.
When you report, describe the specific misuse you confirmed: the provider or insurer, service or prescription, date, claim number, and records showing that it was not yours. Attach or submit copies where requested, while retaining the originals. Continue working directly with the insurer and provider because an FTC report does not itself correct a medical chart or reverse a claim.
Protect information during future contacts
Verify before disclosing an insurance or Medicare number
Before giving a health-insurance or Medicare number, ask the organization why it needs the number, how it will protect it, and whether it will share it. If the request is unexpected, pause and initiate contact through a known-real website or a telephone number you already trust. Do not let a caller create urgency that prevents verification.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Dispose of retained paperwork safely
Shred medical bills, EOBs, prescription labels, insurance forms, and other documents containing personal information before throwing them away. A cross-cut paper shredder is a practical way to destroy retained paperwork; it cannot undo information that was already exposed in the breach, so treat it as a forward-looking disposal measure.
Best Value
- Enhanced Efficiency and Security: Effectively shreds 14 sheets of paper per pass into 5 /32” x 1-9/16” cross-cut particles (Security Level P-4), providing greater security for confidential documents
- Powerful Deskside Shredding: Successfully shreds credit cards, paper clips, staples and unopened junk mail in addition to paper
- Quiet Operation: Minimized noise to prevent distraction in shared workplaces or at home
- Safety Lock for Added Protection: Comes equipped with patented Safety Lock, disabling the machine as needed to protect you, your family or your pets
- Convenient Pull Out Bin to Eliminate Mess: 5-gallon pull out bin neatly contains over 250 shredded sheets
Limit copies and keep a dispute file
Keep only the documents you need for treatment, taxes, insurance, or a dispute. Store the copies you retain securely, and mark which versions were sent to an insurer, provider, collector, bureau, or the FTC. A simple log prevents you from losing track of deadlines and helps you identify whether the same incorrect information is appearing in multiple places.
What to do when the problem does not resolve
The provider will not release or correct a record
Ask for the provider’s Notice of Privacy Practices contact, patient representative, or ombudsman. Send your written dispute again with the marked record and proof of delivery, and request a written explanation of the denial or unresolved correction.
New claims or bills keep appearing
Tell the insurer’s fraud department that the activity is continuing, provide each new claim number, and ask whether the account can receive an ongoing fraud flag or additional verification. Notify every provider connected with the new activity and add the items to your FTC recovery file.
A collector or credit bureau reports disputed medical debt
Dispute the debt in writing with the collector and the credit bureau or bureaus showing it. Include the provider or insurer documentation that identifies the service as unauthorized or incorrect, keep delivery proof, and follow the IdentityTheft.gov recovery steps for the required next actions.
Your benefits are exhausted or care is affected
Contact the insurer immediately and explain that unauthorized claims may be consuming your benefits. Tell your current clinicians that you are disputing potentially mixed records so they can review information before relying on it for care. Ask the insurer and providers what temporary safeguards they can place while the investigation proceeds.
Keep the response focused on four separate jobs
- Detect: Read EOBs, bills, prescriptions, benefit notices, medical records, and credit reports.
- Correct: Dispute inaccurate claims and records with the insurer and each relevant provider in writing.
- Restrict: Use a credit freeze or fraud alert to address new-credit risk, understanding that neither tool covers medical claims.
- Recover: When misuse is confirmed, report it through IdentityTheft.gov and follow the resulting plan while continuing the insurer and provider disputes.
This separation keeps a clean credit report from giving false reassurance and keeps a medical-record error from being treated as only a credit problem.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
