Breach · · 3 min read
Johns Hopkins Bayview: patient data uploaded to an unapproved AI tool
A Baltimore hospital is notifying 3,182 patients after a staff member uploaded a spreadsheet with names, medical record numbers and medications to a public AI tool.
Johns Hopkins Bayview Medical Center in Baltimore is mailing letters to about 3,182 patients after a staff member uploaded a spreadsheet of patient information to a public AI tool the hospital hadn’t approved. There was no hacker here. It’s a plain human mistake, and one that’s getting easier to make as AI chat tools show up everywhere. Here’s what is known and what it means for you.
What happened
According to WMAR-2 News, the hospital found the problem on September 21, 2026, during an internal review. A staff member had uploaded a spreadsheet to an outside AI platform that wasn’t cleared for that use. The spreadsheet covered patients admitted and treated between May and September 2026.
Johns Hopkins says the spreadsheet may have included:
- patient names
- admission and treatment dates
- medical record numbers and account numbers
- the department that treated them
- medications given and provider names
The hospital says it did not include Social Security numbers, financial account details or other identifying information, CBS Baltimore reported. The employee was told to delete the prompt, the conversation and the document from the AI tool’s history, and the hospital asked the company that runs the tool to delete the data too. It says it has reinforced its training and its limits on unapproved apps and AI tools.
Letters started going out on October 22, 2026. They explain how to sign up for 12 months of free credit monitoring through Experian IdentityWorks.
What this means for you
If you were treated at Bayview between May and September 2026, look out for a letter. The data is medical and administrative, not financial, so the main risks are privacy and health-themed scams rather than someone opening a credit card in your name. A message that mentions your real admission date or medication can sound very convincing.
There is a wider lesson too. Anything you paste or upload into an AI chat tool leaves your device and is handled under that company’s rules. Some tools keep conversations, and some may use them to improve their models unless you turn that off. Deleting a chat doesn’t always mean the data is gone everywhere right away.
What you can do
- Read the letter if you get one. The free credit monitoring is a reasonable precaution, though the file didn’t include Social Security or financial details.
- Call the hospital’s line yourself with questions. The call center is 1-833-931-7766, Monday to Friday, 9 a.m. to 9 p.m. Eastern. Use engagement number B174716.
- Be wary of calls or emails about your hospital stay or bills. Hang up and call the number on your own records instead.
- Check your own AI habits. Before you paste a document into a chatbot, remove names, numbers and anything about other people. Look in the tool’s settings for chat history and model training options.
- Learn the patterns. See how scammers use leaked data.
How Frame helps
Frame keeps a catalog of known breaches. Add the ones you know you were part of to a verified email and Frame shows what each exposed, gives you a short checklist and counts it in your exposure report. Automatic breach lookups aren’t live yet. We never collect or store the leaked records themselves.
Sources
- WMAR-2 News, Johns Hopkins alerts 3,000+ patients after data sent to AI tool, October 2026
- CBS Baltimore, Johns Hopkins Bayview warns patients of data breach involving more than 3,100 people, October 26, 2026
New posts, by email.
About once a month. Plain-language privacy notes, nothing else. I never share your address.