This is an awful story, and the headline doesn't say the worst part.
But looks like a sysadmin's access wasn't involved in the identity theft, despite what mention in the headline might suggest.
The only sysadmin angle I see on this story is that the identity theft might've (unclear) eventually permitted the perpetrator to pass pre-employment checks to get get some kind of remote sysadmin job at a hospital.
So I guess the relevance to IT (given this is The Register) is that your sysadmin (or DevOps(R) or whatever) people might not be who you they claim to be, in some freak situation of a person who'd get the victim jailed and then committed to a mental asylum...
But looks like a sysadmin's access wasn't involved in the identity theft, despite what mention in the headline might suggest.
The only sysadmin angle I see on this story is that the identity theft might've (unclear) eventually permitted the perpetrator to pass pre-employment checks to get get some kind of remote sysadmin job at a hospital.
So I guess the relevance to IT (given this is The Register) is that your sysadmin (or DevOps(R) or whatever) people might not be who you they claim to be, in some freak situation of a person who'd get the victim jailed and then committed to a mental asylum...