Maryland pharmacist used keyloggers to spy on coworkers for a decade, victim alleges

A Maryland pharmacist put in adware on tons of of computer systems at a significant educating hospital and recorded movies over the course of a decade of workers pumping breastmilk and breastfeeding, a class-action lawsuit alleges. 

The swimsuit, filed on March 27 and first reported by the Baltimore Banner, accuses pharmacist Matthew Bathula of implanting keyloggers — a sort of software program that information what somebody sorts on a keyboard — on about 400 computer systems on the College of Maryland Medical Heart (UMMC). 

The category-action was filed by an nameless worker on the hospital in opposition to her employer, which the swimsuit contends was negligent in permitting the safety breaches to happen and in allegedly failing to inform victims. No prison fees have been filed in opposition to Bathula, who in accordance with the criticism and an announcement from UMMC is being investigated by the FBI.

“It’s our most honest hope and expectation that the particular person alleged to have violated the belief of his colleagues and of our group might be held accountable to the fullest extent of the legislation, which is why we’ve labored collaboratively over the previous a number of months with the FBI and US Legal professional’s Workplace who’re engaged in an lively prison investigation,” the medical middle mentioned in an announcement posted to their web site on Thursday. 

“Healthcare organizations and the individuals who work in them have sadly in current occasions turn out to be the victims of cyberattacks from risk actors, and we proceed to take aggressive steps to guard our IT methods on this difficult setting.”

Via the keyloggers, Bathula allegedly accessed coworkers’ passwords, together with for financial institution accounts, house surveillance methods, emails, courting apps and different accounts. He downloaded non-public images, movies and private info, the criticism claims, and even remotely activated webcams in examination rooms for telehealth periods.  

The protections to cease somebody from accessing units and putting in malware have been insufficient, the plaintiff alleges. 

“UMMC is topic to quite a few state and federal laws that require it to implement measures to guard the delicate info saved on its laptop methods,” the criticism says. “Bathula couldn’t have pulled off his decade-long cyber spying marketing campaign except UMMC’s knowledge safety measures have been woefully insufficient.”

In keeping with the swimsuit, the hospital despatched an electronic mail to workers in early October about “a critical IT incident” and a “extremely refined and really troublesome to detect cyberattack that has resulted within the theft of knowledge from shared UMMS computer systems.” The e-mail acknowledged using keylogging software program and mentioned the power has been investigating the assault and would talk updates “within the coming days.” 

The victims say they solely found their info was compromised — and in some instances that extremely private materials was accessed — once they have been contacted by the FBI. 

The hospital reportedly “put IT protections in place that have been available previous to Bathula’s assaults and that are affordable and normal within the trade,” in accordance with the criticism, together with disabling using thumb drives and implementing restrictions on downloads and uploads of functions. 

“These minimal protections weren’t in place throughout Bathula’s decade of prison cyber exercise,” they mentioned. 

The pharmacist was terminated in October 2024 however, in accordance with the swimsuit, subsequently moved to a different well being system. Makes an attempt to succeed in Bathula have been unsuccessful. 

A UMMC spokesperson declined to touch upon the specifics of the case however mentioned “in response to this incident, we’ve elevated surveillance throughout our community to raised detect unauthorized entry.”

Be taught extra.