- Under the law, disclosing patient information, or obtaining patient information with the intent to sell, transfer, or use such information for personal gain is against the law.
- From November 2017 to December 2020, a man named Roderick Harvey allegedly paid the former employees to provide him with names and phone numbers of Methodist patients who had been involved in motor vehicle accidents, then sold the information to third persons including personal injury attorneys and chiropractors.
- Harvey is also facing conspiracy charges, and the former hospital employees are also facing charges in connection with disclosing the information to Harvey in violation of HIPAA.