Vanderbilt Health Employee Accessed Infant Medical Records
A hospital employee improperly viewed a patient's electronic medical record after the mother requested a security audit.
Updated on Sept. 29, 2026 in Children’s Health
Live Poll
Do you trust that hospitals adequately protect your personal medical records from unauthorized employee access?
Vanderbilt Health has confirmed an employee accessed an infant's electronic medical records for personal use without a legitimate business purpose. The breach was uncovered after the child's mother requested a formal audit of her son's access logs.
Why it matters
The incident highlights the ongoing challenge of medical record security as patients increasingly advocate for the protection of their sensitive private health information. Hospitals face significant pressure to maintain strict confidentiality for all individuals, particularly vulnerable infants in intensive care units.
The infant patient spent 110 days in the neonatal intensive care unit at Monroe Carell Jr. Children's Hospital. In 2024, the U.S. Department of Health and Human Services recorded 70,000 reports of unauthorized medical record access.
The players
Vanderbilt Health
This Nashville-based medical system operates the Monroe Carell Jr. Children's Hospital and manages extensive electronic health records for patients.
U.S. Department of Health and Human Services
This federal agency is responsible for overseeing national healthcare policies and tracking privacy breaches across the United States.
The details
The patient's mother suspected a privacy breach after an acquaintance gained knowledge regarding the birth before it was publicly announced. Vanderbilt Health staff confirmed the employee accessed the record twice, and the employee admitted to using the information for personal reasons.
Timeline
The patient spent 110 days in the NICU.
In 2024, the HHS received nearly 70,000 reports of unauthorized access.
The VUMC privacy office issued an employee reminder about monitoring in January 2025.
The story was published on September 29, 2026.
Health Landscape
This event serves as a reminder of the strict compliance protocols required by the Health Insurance Portability and Accountability Act to protect patient confidentiality. Hospitals must continuously evolve their auditing procedures to meet the standards set by federal health privacy laws.
Patients who suspect their medical privacy has been violated have the right to request a formal audit of their electronic health records. This action can help ensure that unauthorized access is identified and addressed by hospital administration.
The takeaway
Patients should remain vigilant about their health records and report any suspicious knowledge of their private information to hospital authorities. Proactively requesting access logs is an effective way for individuals to verify that their sensitive medical data is being handled correctly.
Further reading
For more information on hospital privacy policies, visit the Children’s Health section.
Source note: This article includes information reported by Wsmv.
Live Poll
Do you trust that hospitals adequately protect your personal medical records from unauthorized employee access?
