IDAHO MAN CHARGED WITH HACKING INTO GRIFFIN MEDICAL PRACTICE

Robert Purbeck, of Meridian, Idaho, made his initial appearance before a U.S. Magistrate Judge in Boise, Idaho. Purbeck was indicted in the Northern District of Georgia on March 2, 2021 for computer fraud and abuse, access device fraud, and wire fraud.

“This alleged cyber-criminal and extortionist targeted the City of Newnan as well as medical clinics in our District, stealing over 60,000 records containing personal information of our citizens,” said Acting U.S. Attorney Kurt R. Erskine. “He then allegedly attempted to extort a Florida orthodontist, threatening to sell the social security number of his minor child unless the orthodontist submitted to a payment demand. Now, this defendant must answer for his alleged crimes in the Northern District of Georgia.”

“The charges against Purbeck highlight the need to remain vigilant in our cybersecurity efforts,” said Chris Hacker, Special Agent in Charge of FBI Atlanta. “The theft of intellectual property to be used to extort citizens is a very serious crime and one the FBI will diligently pursue, no matter if you are hiding behind a computer screen.”

According to Acting U.S. Attorney Erskine, the charges, and other information presented in court: Between June 23, 2017 and April 28, 2018, Purbeck allegedly purchased, on a criminal marketplace, the username and passwords to computer servers belonging to multiple Georgia victims. He then allegedly used these credentials to access the victims’ computers and stole sensitive personally identifiable information, including:

· Medical records and other documents that contained names, addresses, birth dates, and social security numbers of over 43,000 people from a Griffin, Georgia, medical clinic;

· Police reports and other documents containing personal information of over 14,000 people from the City of Newnan; and

· Personal information of over 7,000 people from a Locust Grove, Georgia, medical practice.

On June 25, 2018, Purbeck allegedly hacked into the computers of an orthodontist in Florida and stole medical records of over 1,800 people. Purbeck then allegedly threatened, harassed, and attempted to extort the orthodontist, demanding a ransom payment in Bitcoin. Purbeck also allegedly threatened to disclose and sell the stolen patient and personal information unless the orthodontist paid the ransom demand. Purbeck allegedly identified the name and social security number of the orthodontist’s minor child and threatened to disclose and sell their personal information as well. During the course of this attempted extortion, Purbeck allegedly sent numerous harassing e-mails and text messages to the orthodontist and his patients.

Robert Purbeck, a/k/a Lifelock, a/k/a Studmaster, 41, of Meridian, Idaho, was indicted by a federal grand jury in the Northern District of Georgia on March 2, 2021. Members of the public are reminded that the indictment only contains charges. The defendant is presumed innocent of the charges, and it will be the government’s burden to prove the defendant’s guilt beyond a reasonable doubt at trial.

This case is being investigated by the Federal Bureau of Investigation, Atlanta Field Office, with valuable assistance provided by the FBI Boise Resident Agency.

Assistant U.S. Attorneys Michael Herskowitz, Chief of the Cyber and Intellectual Property Crimes Section and Nathan Kitchens, Chief of the Public Integrity and Special Matters Section, and the U.S. Department of Justice Computer Crimes and Intellectual Property Section (CCIPS) are prosecuting the case. The U.S. Attorney’s Office for the District of Idaho has also provided valuable assistance in this case.