BALTIMORE, Md. — Johns Hopkins Bayview Medical Center has begun notifying about 3,182 patients that their personal health information may have been exposed after a worker uploaded a spreadsheet to a public AI tool that the hospital had not approved.
The hospital said it discovered the problem on Sept. 21, 2026. That same day, during an internal review, a staff member uploaded a spreadsheet of patient information to an outside AI platform that was not cleared for that use. As a result, the data was shared improperly with the third-party tool.
The spreadsheet covered patients admitted and treated between May 2026 and September 2026. The exposed details may have included patient names, dates of admission and treatment, medical record numbers, account numbers, the department that treated them, medications given and the names of their providers…