Pay me or I destroy your rating, the message said, tied to my patient files
This account was submitted by a healthcare provider and de-identified before publication. Details that could identify a patient or practice have been removed, and it is shared with the provider’s consent.
A public post on X tagged my practice and warned that unless I provided free follow-up work and released records, a campaign of one-star reviews would begin. The post was visible to anyone and framed as a countdown, pay or I destroy your rating. It referenced protected health details in a way meant to prove the sender had leverage over me. A vague negative review had already appeared elsewhere as a first shot. The threat was explicit and public, which made it feel even more menacing. It was extortion tied directly to patient information. Seeing it out in the open was chilling.
I cannot confirm anything about this person's care or their records, because HIPAA absolutely forbids it. I cannot respond to the public post with any specifics without disclosing protected information myself. Even correcting the sender's characterization would mean engaging PHI in public. My records-release process is lawful and verified, and I cannot bypass it under threat. The extortion relies on my inability to defend myself openly. I cannot explain why I will not simply comply. The law that shields patients also seals my mouth against a public threat.
Watching a public threat about my patient files circulate was one of the most unsettling experiences of my young career. I lost sleep imagining the promised wave of reviews and the harm it could do to a practice I am still building. The stress of knowing I could not respond publicly compounded the fear. I worried about how patients seeing the post might interpret my silence. The anxiety followed me into the operatory and home again. Being extorted in the open, where colleagues might see, added a layer of humiliation. It made me feel exposed in every direction.
I did not release any records or provide free work under threat. I captured screenshots of the post and the associated messages for evidence. I reported the post to X as targeted harassment and extortion, and I contacted law enforcement on legal advice. X eventually removed the post after review, though it lingered for a time. My attorney confirmed the conduct was likely criminal but noted the anonymity challenge. I reinforced my compliant records procedures and briefed my small staff. I refused to be coerced.