NEWARK, N.J. – A Louisiana man was arraigned today on charges that he illegally accessed a healthcare company’s online portal and downloaded more than 60,000 laboratory reports belonging to more than 30,000 patients, U.S. Attorney Craig Carpenito announced.
According to federal officials David Manno, 34, of Marrero, Louisiana, appeared before U.S. District Judge Katharine S. Hayden in Newark federal court and pleaded not guilty. He was indicted by a federal grand jury on Nov. 19, 2019, on one count of wire fraud.
According to documents filed in this case and statements made in court:
The victim was a publicly traded healthcare company with its headquarters in New Jersey. The company offered a web-based portal through which patients could access their medical and health information, schedule laboratory testing, track their healthcare provider information, maintain medical records, and pay for services.
Patients were able to log in to the portal by using a unique username and password. In November 2016, Manno accessed the portal and sent requests that caused the portal to send him lab reports belonging to other patients.
Manno sent more than 150,000 modified requests, causing the portal to send him more than 60,000 laboratory reports for more than 30,000 patients.
The wire fraud count with which Manno is charged carries a maximum potential punishment of 20 years in prison and a fine of up to $250,000, or twice the gross loss or gain caused by the offense.
U.S. Attorney Carpenito credited special agents of the FBI, under the direction of Special Agent in Charge Gregory W. Ehrie in Newark, with the investigation leading to the indictment.