Skip to content
Data Breach at Johns Hopkins Bayview Exposes Patient Information

Data Breach at Johns Hopkins Bayview Exposes Patient Information

First seen 27 Oct 2026, 01:26 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 27, 2026 at 10:43 UTC
  • •Over 3,100 patients' data exposed due to unauthorized AI tool usage.
  • •The breach involved sensitive health information but excluded Social Security numbers.
  • •Johns Hopkins has implemented corrective measures and is offering credit monitoring to affected patients.

Johns Hopkins Bayview Medical Center reported a data breach affecting over 3,100 patients due to an employee uploading a spreadsheet with sensitive information to an unauthorized AI tool. The breach, discovered during an internal review, involved data from May to September 2026, including patient names, admission dates, treatment details, and medical record numbers, but not Social Security or financial information. The medical center has initiated an investigation and taken corrective measures, including contacting the AI platform for deletion of the data. Patients were notified via letters starting October 22, 2026, and offered 12 months of complimentary credit monitoring. A toll-free call center has been established for patient inquiries.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-30
Data breach discovered
An employee uploaded a spreadsheet to an unauthorized AI tool, exposing patient data. The breach was identified during an internal review.
Thebanner
2026-10-22
Patient notifications begin
Johns Hopkins started mailing letters to affected patients, informing them of the breach and offering credit monitoring.
Cbsnews

More articles in this cluster (2)

Following this threat?

Track Johns Hopkins in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 3

Common questions

What specific data was exposed?
The exposed data included patient names, admission and treatment dates, medical record numbers, and account numbers, but not Social Security or financial information.
How is Johns Hopkins addressing the breach?
Johns Hopkins has initiated an investigation, contacted the AI platform for data deletion, and reinforced policies on handling protected health information.
What should affected patients do?
Affected patients are advised to enroll in the complimentary credit monitoring service offered by Johns Hopkins.