The federal government prosecuted a phlebotomist at a cancer center who stole the social security number and date of birth of a patient (United States v. Gibson).1 Gibson had access to patient information such as date of birth and social security numbers.