Weill Cornell Medicine notifies patients of unauthorised AI use of patient data in June
In June 2026, NewYork-Presbyterian Hospital patient information was entered into and processed by an AI tool without authorisation during radiology research at Weill Cornell Medicine. The institution discovered the incident on 6 September, halted the research and requested deletion of the relevant data, and reports in November said patients had been notified. The information involved included medical record numbers and imaging examination accession numbers, and the institution said it had found no evidence of misuse of patient information or access by unauthorised individuals.
Key facts
- Affected organisation
- NewYork-Presbyterian Hospital
- Incident type
- Data breach
- Occurred / detected
- 2026-06
- Scale of damage
- Unauthorised entry and processing of patients’ health information in an AI tool
- Cause / method
- Patient health information was entered into and processed by an AI tool without authorisation during radiology research
- Location
- United States
If your data was exposed
Exposed dataHealth & medical data
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Confirmation of a policy violation involving the unauthorised entry and processing of patient health information in an AI tool, along with patient notifications, became public.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.