Prosecutors said Dwight McPherson, 38, of Brooklyn, exploited his access to the hospital's computer registration system to acquire lists of patient names, phone numbers and social security numbers over a two-year period.
McPherson allegedly pulled the patient profiles from the computer during his evening shifts at the hospital on Manhattan's East Side.
Authorities became aware that something was amiss when printouts of patient records were discovered in Atlanta, Ga. during an investigation by U.S. postal inspectors, according to a complaint filed by prosecutors Saturday.
McPherson confessed to a role in the identity-theft scheme when he was interrogated by agents on Friday, an inspector said in the complaint.
McPherson told agents that in 2006, he was approached by someone and offered money in exchange for the names, addresses and other identifying information of male patients born between 1950 and 1970. The complaint said McPherson sold one batch of 1,000 records sometime this past December or January for $750. A second batch a short time later earned him $600, the agents said.
Prosecutors didn't reveal Saturday who was purchasing the data or why, but the court complaint said the buyers intended to use the information "in connection with illegal activity."
During his brief court appearance, he sat silently while relatives watched from the back of the courtroom. He wouldn't speak to reporters after he was released on bond and left the courthouse.
"He is a hard working, honest man," said his lawyer, Bob Walters.
New York-Presbyterian suspended McPherson in February after being contacted by federal investigators.
Hospital spokeswoman Myrna Manners said Friday evening that none of the stolen data contained private health information, and that the hospital was unaware of any instance where the information had been used to scam individual patients.
The hospital is in the process of contacting thousands of patients, setting up a hot line for them and offering credit monitoring services. It is also examining its procedures to prevent future thefts, Manners said.
McPherson is charged with computer fraud, identity document fraud, transmission of stolen property and sale of stolen property. U.S. Magistrate Judge James C. Francis IV ordered McPherson not to leave the metropolitan area before his next scheduled court appearance on May 12.
