My mother in law’s bank account was drained within a week of her passing. Evidently someone at the hospital had to have been involved, although we never learne

My mother in law’s bank account was drained within a week of her passing. Evidently someone at the hospital had to have been involved, although we never learned the vector. It’s really not a stretch to imagine a sophisticated attacker who specializes in identity theft paying off hospital staff for access to dead patient’s info, even phones. It’s the last thing on the families minds. We already know that insiders at cell providers are working with SIM swappers to compromise SMS verification. Why is it unlikely for hospital staff to do the same?