What Happened
A federal grand jury in Wilmington indicted Ty Mauldin on December 15, 2025, for using the stolen professional-licensure information of medical providers he worked with to order thousands of opioid pills from wholesale suppliers and prescribe himself opioids — all without those providers' knowledge. Mauldin, a medical biller and credentialer, also falsified his own medical records and posed as a licensed nurse to obtain additional controlled substances and bill insurers.
According to the indictment, Ty Mauldin worked as a medical biller and credentialer, gaining access to the professional licensure information of medical providers and organizations he worked with. He used that access to order himself thousands of opioid pills through wholesale pharmaceutical suppliers and to prescribe himself opioids, without the knowledge of the professionals whose identities he used. Mauldin also falsified his own electronic medical records and forged documents to present himself as a cancer patient requiring pain management, and separately falsely represented himself as a licensed nurse to perform therapy on patients and bill Medicaid for it.
What Went Wrong
- A non-clinical administrative role (medical biller/credentialer) had enough access to licensure data to impersonate clinicians with wholesale pharmaceutical suppliers.
- Wholesale ordering systems accepted orders under a licensed provider's identity without an independent check that the ordering party was actually that provider.
- Mauldin was able to sustain a false clinical identity (posing as a nurse) long enough to be allowed to perform a clinical therapy on patients.
How It Could Have Been Prevented
- Segregate access to provider licensure and NPI data from the ability to place wholesale controlled-substance orders under that provider's name.
- Require multi-factor, provider-specific authentication for wholesale pharmaceutical ordering rather than accepting licensure numbers alone as proof of identity.
- Verify credentials directly with the issuing board before allowing anyone to perform or bill for clinical services, rather than relying on self-reported certification.