Not a law firm.We connect people affected by data breaches with independent attorneys.
Incident information

Was Your Information Involved in the Johns Hopkins Bayview Medical Center Data Incident? Learn About Your Options

Information about this incident and a simple way to see if you may qualify to be connected with independent attorneys.

What happened

In October 2026, Johns Hopkins Bayview Medical Center in Baltimore, Maryland began notifying patients that their health information may have been improperly shared after a staff member uploaded a spreadsheet of patient information to a public artificial intelligence (AI) tool that the hospital had not approved for that use.

According to published reports, the incident occurred and was discovered on September 21, 2026. The spreadsheet covered patients admitted and treated between May 2026 and September 2026. The information that may have been involved includes:

  • Patient names
  • Dates of admission and treatment
  • Medical record numbers and account numbers
  • The department that provided treatment
  • Medications given
  • Names of providers

The hospital has stated that Social Security numbers and financial account details were not included. Approximately 3,182 patients are reported to be affected. Notification letters began to be mailed on October 22, 2026, and include an offer of 12 months of complimentary credit monitoring. You may want to review your medical and insurance statements for services you did not receive.

As of the date of this page, we are not aware of any lawsuit filed over this incident.

If you were a patient at Johns Hopkins Bayview Medical Center between May and September 2026, or you receive a notice about this incident, you may want to understand your options. With your consent, the form below lets us share your information with independent law firms that may contact you.

DataBreachRelief.com is not a law firm and does not provide legal advice. With your consent, information you submit may be shared with one or more independent law firms. Submitting information does not create an attorney-client relationship, and no outcome is guaranteed.

Possible remedies

Possible remedies, if any, depend on the facts of your situation and the applicable law. No outcome or payment is guaranteed.

Official source

Read the original public notice or report about this incident (opens in a new tab):

See if you may qualify
Were you a Johns Hopkins Bayview Medical Center patient between May and September 2026? See if you may qualify to connect with an independent attorney.

Optional. Please do not include Social Security numbers, dates of birth, account numbers, or medical details.

Thank you. Your information has been received. If a participating law firm is interested in your situation, they may contact you.
Sorry, something went wrong and your information was not sent. Please try again.

DataBreachRelief.com is not a law firm and does not provide legal advice. We are an independent information and referral service. Information you submit may be shared with one or more independent law firms that may contact you about your potential claim. Submitting information does not create an attorney-client relationship. Listing an incident does not mean a lawsuit has been filed, and no outcome is guaranteed. Attorneys who receive referrals may pay us a fee for advertising or lead services.