Home / Health / AI Leak Exposes 3,100+ Patient Records
AI Leak Exposes 3,100+ Patient Records
27 Oct
Summary
- Employee uploaded patient data spreadsheet to unauthorized AI tool.
- Over 3,100 patients' personal and medical information may be exposed.
- Affected patients offered 12 months of complimentary credit monitoring.
Johns Hopkins Bayview Medical Center is alerting patients to a data breach affecting over 3,100 individuals. The breach occurred when an employee uploaded a spreadsheet containing patient information to an unauthorized artificial intelligence tool.
The exposed data, from May through September 2026, could include names, admission and treatment dates, medical record numbers, account numbers, departments, medications, and provider names. Crucially, it did not contain Social Security numbers or financial information.
Following discovery during an internal review, the medical center took immediate action. Steps included directing the employee to delete the data from the AI tool and requesting its removal from the platform.
To prevent recurrence, Johns Hopkins has reinforced policies and training on handling protected health information and using approved AI tools. Patients whose information was affected began receiving notification letters on October 22, 2026.
These letters offer 12 months of free credit monitoring through Experian IdentityWorks. A dedicated call center, available weekdays from 9 a.m. to 9 p.m. at 1-833-931-7766 (reference engagement number B174716), has been established to address patient concerns.
