Local
Baltimore hospital says employee uploaded patient spreadsheet to unapproved AI service
Johns Hopkins Bayview is notifying about 3,182 patients after a spreadsheet containing treatment and admission details was uploaded to a third-party AI tool. The hospital says the information did not include Social Security numbers or financial account details.
Johns Hopkins Bayview Medical Center is notifying approximately 3,182 patients that some of their health information may have been exposed after an employee mistakenly uploaded a spreadsheet to a public, third-party artificial intelligence tool.
Johns Hopkins Medicine said it discovered the incident during an internal review on Sept. 21. The spreadsheet contained information related to patient admissions and treatment from May through September 2026. Depending on the patient, the data may have included names, admission and treatment dates, medical record and account numbers, service departments, medications administered and provider names.
The hospital said the spreadsheet did not include Social Security numbers, financial account information or other identifying information. It has not reported that the information was misused.
Letters were sent to affected patients on Thursday, Oct. 22, with instructions for enrolling in 12 months of complimentary credit monitoring through Experian IdentityWorks.
Johns Hopkins Medicine said it deleted the initial prompt, follow-up conversation and document from the AI tool’s history, and contacted the company that operates the service to request further deletion and corrective action. The hospital also said it is reinforcing training and rules for handling protected health information, including restrictions on unauthorized applications and AI tools.
Patients with questions can call Johns Hopkins Bayview at 833-931-7766 on weekdays from 9 a.m. to 9 p.m. Callers should use engagement number B174716.