Ruben Rodriguez and Maria Victoria Suarez were both indicted after they hatched a plot with an unnamed co-conspirator. The aim of the ruse was to steal patients’ personal privacy data from a local ambulance service, American Medical Response, and then sell this data to personal injury lawyers in the vicinity.

According to a statement released by the US Attorney’s office, the unnamed collaborator, who worked within the ambulance service, stole the data from company computers, and then information was brokered by the couple and sold to personal injury clinics, which “would use the personal identification information to improperly solicit individuals transported by AMR to offer medical services.”

Per the US Attorney’s account, the duo face a maximum of five years in jail for both conspiracy and fraud charges, in addition to a mandatory consecutive term to any other potential sentence of two years’ imprisonment on aggravated identity theft offenses.

Rodriguez and Suarez were indicted for a similar incident last year in which federal prosecutors claim that the two stole personal identification information from Jackson Memorial Hospital in Miami. The couple is still awaiting a hearing on this case.