{"schema_version":"0.10.0","id":"LR-2026-0338","record_version":1,"title":"Ontario hospital AI transcription bot sends confidential patient information to recipients after recording a meeting","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":47.0,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":3.52,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"Publisher not yet named · subject to change","original_document":null,"reports_total":1,"reports_independent":0,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"Publisher not yet named · subject to change"}]},"sources_hash":"bac2724548292eb90121a8f2d69bf2269c3813938195f65e05412d0afb61fb41"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":"Transcribing spoken words into text and producing detailed meeting notes and summaries","safeguard_state":null,"production_intended":null},"event":{"date_occurred":"2024-09-23","date_disclosed":"2025-11-21","incident_class":"privacy_leakage","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"unknown","summary":"An AI transcription tool, Otter.ai, was installed by a physician on a personal device in September 2024. Through the physician's personal digital calendar it could access a hospital rounds meeting invite, because the organizer had not removed him after he left in June 2023. On 23 September 2024 the tool automatically joined a virtual hepatology rounds meeting attended by hospital physicians. The personal health information of seven patients was discussed. After the meeting, a summary and transcript were automatically emailed to participants, including 65 recipients, 12 of whom no longer worked at the hospital. The breach went undetected until those emails arrived. The Information and Privacy Commissioner of Ontario investigated. The hospital then blocked AI scribe tools on-site and updated training and meeting-review policies.","tags":[],"date_detected":null,"near_miss":null,"root_cause":"oversight","root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null,"primary_risk":"RK04"},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"major","severity_because":"Major tier: a regulator is involved (Ontario IPC investigation) and a stated 65 recipients were reached, 12 no longer employed by the hospital","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":["patient names","sex","physician name","diagnoses","medical notes","treatment information"],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://www.hrreporter.com/focus-areas/automation-ai/ai-bot-sends-confidential-info-to-ontario-hospital-patients-after-recording-doctors-meeting-ipc/393766","publisher":"Canadian HR Reporter","date":"2025-11-21","type":"press","title":"AI bot sends confidential info to Ontario hospital patients after recording doctors’ meeting: IPC - Canadian HR Reporter","archived_url":null,"attachment":"first_report"}],"per_field_confidence":{"system.intended_use":"C","event.date_occurred":"C","event.incident_class":"C","event.root_cause":"C","impact.data_categories_exposed":"C","impact.severity":"D","impact.severity_because":"D","event.primary_risk":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","event.detection_method":"D","context.country":"D","system.developer":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"system.intended_use":[{"source_index":0,"quote":"Otter.ai — which uses artificial intelligence to transcribe spoken words into text and is designed to allow users to obtain detailed meeting notes and summaries — distributed the sensitive material automatically."}],"event.date_occurred":[{"source_index":0,"quote":"On Sept. 23, 2024, the AI tool automatically joined a virtual hepatology rounds meeting attended by hospital physicians, according to the IPC."}],"event.incident_class":[{"source_index":0,"quote":"An Ontario hospital's privacy breach involving an AI transcription tool reveals how organizational oversights can undermine even the strongest data protection intentions."}],"event.root_cause":[{"source_index":0,"quote":"Second, the meeting organizer did not remove the physician from the meeting invite following his departure in June 2023, according to the Information and Privacy Commissioner of Ontario."}],"impact.data_categories_exposed":[{"source_index":0,"quote":"The compromised information included patient names, sex, physician's name, diagnoses, medical notes, and treatment information, the watchdog confirmed."}],"impact.severity":[{"source_index":0,"quote":"The IPC reported that during the meeting, the personal health information of seven patients was discussed."}],"impact.severity_because":[{"source_index":0,"quote":"Of the 65 users on the recipient list, the IPC noted that 12 of whom were no longer employed by the hospital."}],"event.summary":[{"source_index":0,"quote":"As a result, when the physician installed Otter.ai on a personal device in September 2024, the transcription tool was able to access the rounds meeting invite via the physician's personal digital calendar."},{"source_index":0,"quote":"Second, the meeting organizer did not remove the physician from the meeting invite following his departure in June 2023, according to the Information and Privacy Commissioner of Ontario."},{"source_index":0,"quote":"On Sept. 23, 2024, the AI tool automatically joined a virtual hepatology rounds meeting attended by hospital physicians, according to the IPC."},{"source_index":0,"quote":"The IPC reported that during the meeting, the personal health information of seven patients was discussed."},{"source_index":0,"quote":"The breach went undetected until a meeting summary and access to a transcript of the recording was automatically emailed to participants after the meeting."},{"source_index":0,"quote":"Of the 65 users on the recipient list, the IPC noted that 12 of whom were no longer employed by the hospital."},{"source_index":0,"quote":"It blocked users from using AI scribe tools such as Otter.ai and deepseek.com while on-site via a firewall configuration."}]},"notes_on_gaps":"Single press source (Canadian HR Reporter) summarising an Information and Privacy Commissioner of Ontario investigation; the IPC report itself was not provided. Not stated: model name, version, developer, harness, tools granted, permissions scope, guardrails, deployment context and lifecycle stage; these fields were left out. Date detected and date disclosed are not stated (2025-11-21 is the article date, not a disclosure date). Detection method is not stated; the breach was noticed after automatic emails to participants, so no method was assigned. Trigger, failure class, duration, time to contain and reversibility are not stated and were left out. Judgement: autonomy_level set to full-auto from the stated automatic joining and automatic emailing. Judgement: the outbound-data control H2 is marked missing because no source says such a check existed. Judgement: A1 marked failed because calendar access persisted after departure; F2 marked failed from the undetected breach. Judgement: responsible party set to deployer (the hospital) from its own response. Severity set to major on the regulator-involved test. No records_exposed or third_parties_affected_count was stated, so neither was set. The 12 former employees were not counted as third parties. The IPC recommendation of a lobby is treated as evidence that this control was missing. The Scassa quote is about agentic AI in general, used only for agent_involved. Deepseek.com appears only in the hospital's blocking measure and is not treated as involved in the incident. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (Publisher not yet named · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"doing","text":"The AI tool automatically joined a virtual hepatology rounds meeting.","quote":"On Sept. 23, 2024, the AI tool automatically joined a virtual hepatology rounds meeting attended by hospital physicians, according to the IPC.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://www.hrreporter.com/focus-areas/automation-ai/ai-bot-sends-confidential-info-to-ontario-hospital-patients-after-recording-doctors-meeting-ipc/393766"]},"analysis":{"sections":{"timeline":[{"text":"Physician departed the hospital; the meeting organizer did not remove him from the meeting invite.","quote":"Second, the meeting organizer did not remove the physician from the meeting invite following his departure in June 2023, according to the Information and Privacy Commissioner of Ontario.","source_index":0,"when":"2023-06"},{"text":"Physician installed Otter.ai on a personal device; the tool could access the rounds meeting invite via his personal digital calendar.","quote":"As a result, when the physician installed Otter.ai on a personal device in September 2024, the transcription tool was able to access the rounds meeting invite via the physician's personal digital calendar.","source_index":0,"when":"2024-09"},{"text":"The AI tool automatically joined a virtual hepatology rounds meeting attended by hospital physicians.","quote":"On Sept. 23, 2024, the AI tool automatically joined a virtual hepatology rounds meeting attended by hospital physicians, according to the IPC.","source_index":0,"when":"2024-09-23"},{"text":"After the meeting, a meeting summary and access to the transcript were automatically emailed to participants; the breach was undetected until then.","quote":"The breach went undetected until a meeting summary and access to a transcript of the recording was automatically emailed to participants after the meeting.","source_index":0,"when":null},{"text":"The hospital blocked AI scribe tools on-site via a firewall configuration.","quote":"It blocked users from using AI scribe tools such as Otter.ai and deepseek.com while on-site via a firewall configuration.","source_index":0,"when":null}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://www.hrreporter.com/focus-areas/automation-ai/ai-bot-sends-confidential-info-to-ontario-hospital-patients-after-recording-doctors-meeting-ipc/393766"]}}