YUMA, Ariz. (KYMA) – We have obtained the mugshot of a well-known Yuma doctor accused of a fraud scheme.
Minute Order notes we obtained from Yuma County Justice Court state that Dr. Irfan Fazil, 54, was allegedly involved in a fraud scheme where the loss amounts to more than $36 million.
The summary of probable cause statement says that Dr. Fazil along with his spouse were running a large-scale criminal enterprise.
They say that between July and December of 2025 three AHCCCS enrolled provider entities owned by them submitted claims of over $36 million in AHCCCS payments within six months, representing about 97 percent of all revenue for 2025.
That includes tens of thousand of X-rays, over 10,000 ultrasounds and more than a thousand ECGs.
Multiple patients say they never received the billed services. Some were even out of the state or out of the country.
The notes also detail that…
IT & DATA SECURITY (MITIGATING THE “INSIDER THREAT”)
As seen in the TD Bank case, an employee with too much “access” can sell your customer data to syndicates.
- Principle of Least Privilege (PoLP): Employees should only have access to the specific folders and databases required for their current task.
- Access Revocation: Have a “Termination Checklist” that ensures all digital access (Email, VPN, Banking) is revoked within 60 minutes of an employee resigning or being dismissed.
- System Logs & Audit Trails: Enable “Read/Write Logging” on your server. If a customer’s data is leaked, you need to know exactly which login accessed that record and at what time.
- Encryption at Rest: Ensure that sensitive files (like your customer ID numbers or payroll spreadsheets) are encrypted so that if a staff member copies them to a USB, they cannot be read.