Information about this incident and a simple way to see if you may qualify to be connected with independent attorneys.
In October 2026, Johns Hopkins Bayview Medical Center in Baltimore, Maryland began notifying patients that their health information may have been improperly shared after a staff member uploaded a spreadsheet of patient information to a public artificial intelligence (AI) tool that the hospital had not approved for that use.
According to published reports, the incident occurred and was discovered on September 21, 2026. The spreadsheet covered patients admitted and treated between May 2026 and September 2026. The information that may have been involved includes:
The hospital has stated that Social Security numbers and financial account details were not included. Approximately 3,182 patients are reported to be affected. Notification letters began to be mailed on October 22, 2026, and include an offer of 12 months of complimentary credit monitoring. You may want to review your medical and insurance statements for services you did not receive.
As of the date of this page, we are not aware of any lawsuit filed over this incident.
If you were a patient at Johns Hopkins Bayview Medical Center between May and September 2026, or you receive a notice about this incident, you may want to understand your options. With your consent, the form below lets us share your information with independent law firms that may contact you.
DataBreachRelief.com is not a law firm and does not provide legal advice. With your consent, information you submit may be shared with one or more independent law firms. Submitting information does not create an attorney-client relationship, and no outcome is guaranteed.
Possible remedies, if any, depend on the facts of your situation and the applicable law. No outcome or payment is guaranteed.
Read the original public notice or report about this incident (opens in a new tab):
DataBreachRelief.com is not a law firm and does not provide legal advice. We are an independent information and referral service. Information you submit may be shared with one or more independent law firms that may contact you about your potential claim. Submitting information does not create an attorney-client relationship. Listing an incident does not mean a lawsuit has been filed, and no outcome is guaranteed. Attorneys who receive referrals may pay us a fee for advertising or lead services.