Johns Hopkins alerts 3,000+ patients after data sent to AI tool

Johns Hopkins Bayview Medical Center has notified approximately 3,182 patients that their personal health information may have been exposed after a staff member uploaded a spreadsheet to an unapproved public AI tool. The hospital discovered the incident on September 21, 2026, and the spreadsheet covered patients admitted and treated between May and September 2026. Exposed details may have included patient names, dates of admission and treatment, medical record numbers, account numbers, treating department, medications given, and provider names, but did not include Social Security numbers, financial account details, or other identifying information. The worker deleted the AI prompt, thread, and document, and the hospital asked the AI company to delete the data and implemented new preventive measures. Johns Hopkins Bayview is strengthening policies and training on protected health information, including limits on unapproved apps and AI tools. The hospital began mailing letters to affected patients on October 22, 2026, offering 12 months of free credit monitoring through Experian IdentityWorks, and has set up a toll-free call center at 1-833-931-7766 (engagement number B174716), open Monday through Friday from 8 a.m. to 8 p.m. Central time.

(Source：WMAR 2 News Baltimore)