Weill Cornell patient data entered into AI tools without authorization
Imaging data was processed from June 10 to June 20; the notice does not state how many patients were affected.
Weill Cornell Medicine said patient health information was entered into AI tools and processed with machine learning without authorization during a radiology research study. It learned of the incident on September 6. Data from Weill Cornell Imaging at NewYork-Presbyterian or NewYork-Presbyterian Hospital was entered between June 10 and June 20, violating policy. Weill Cornell requested deletion; its notice gives no patient count and does not say whether HHS was notified.
Unconfirmed: Deletion of all submitted data is unconfirmed, and the patient count and HHS notification status are not stated.
- A November 5 notice said the use violated Weill Cornell policies.
- Medical record numbers were involved even if patient names were not.
- DataBreaches.net asked whether deletion of the data was acknowledged.
- The website notice does not say whether HHS was notified.
Impact: Unauthorized processing of patient health information
- Countries
- United States
From the original article
2 min read at databreaches.netNaomi Diaz reports: New York City-based Weill Cornell Medicine disclosed that patient health information was entered into AI tools and processed using machine learning without authorization as part of a radiology research study. Weill Cornell learned of the incident Sept. 6 and launched an investigation, which determined that certain patient information from Weill Cornell Imaging...
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.