Johns Hopkins Bayview data breach exposed info of over 3,000 patients

Johns Hopkins Bayview Medical Center experienced a data breach in late September after an employee mistakenly uploaded a spreadsheet containing sensitive patient information to a third-party platform not approved by the hospital, The Baltimore Banner reported.

The breach impacted data of 3,182 patients who visited the center from May through September, including details about providers, admission dates, treatments, medications, account numbers, and medical record numbers. However, Social Security numbers and financial account information were not exposed, according to the hospital's news release.

The hospital discovered the breach during an internal review on the same day and began notifying affected patients last week after concluding its investigation. Johns Hopkins is offering 12 months of complimentary credit monitoring to those impacted and has established a call center to address questions, reachable at 1-833-931-7766.

Following the breach, administrators required the employee to remove the data from the AI tool and contacted the tool’s parent company to delete the information. Johns Hopkins is reinforcing policies and training regarding the use of authorized and unauthorized tools to prevent future incidents.