Former Ashley County Medical Center employee

Profile narrative

The threat actor is known publicly as a former employee of Ashley County Medical Center, specifically identified in reports as a former nurse who worked at the facility. The individual’s alias reflects their prior employment status, and the only geographic detail provided places them within the United States of America. No additional personal identifiers, such as a real name or further occupational history, are disclosed in the available sources. The actor’s profile is therefore limited to the insider role they held at the medical center before their separation from the organization.

The actor’s activity was confined to the healthcare sector, targeting a single medical institution located in Ashley County, Arkansas, which operates within the United States. The strategic objective behind the unauthorized access was not financial gain, espionage, or disruption of services; rather, the investigation determined that the access was motivated purely by personal curiosity about patient information. This motivation distinguishes the behavior from typical financially driven cybercrime or state‑sponsored espionage campaigns that seek monetary profit, intelligence collection, or operational impact. Consequently, the actor’s goals align with an insider threat pattern where privileged access is misused for non‑malicious, yet still unlawful, reasons.

The notable tactics, techniques, and procedures observed involve the misuse of legitimate credentials to view electronic health records without a legitimate care‑related purpose, a classic insider threat vector that does not rely on malware, phishing, or external tooling. No evidence was found that the actor distributed, shared, or exfiltrated the accessed data beyond the internal environment of Ashley County Medical Center, indicating a lack of data leakage or secondary misuse. Attribution to any state sponsor, criminal consortium, or organized group is absent from the public record, and the actor appears to have acted alone. The sole publicly reported operation associated with this individual is the August 2020 incident at Ashley County Medical Center, during which the former nurse inappropriately accessed the medical records of 772 patients, an event that prompted an internal investigation and a subsequent report of potential federal privacy law violations.

Incidents

Attributed incidents are available to members.