What happened

A group of physicians at an Ontario hospital held a virtual hepatology "rounds" meeting to discuss the medical records and care plans for seven admitted patients.

Unbeknownst to the attendees, an Otter.ai transcription bot automatically joined the call, listening to the discussion, transcribing it, and emailing a full summary, including patient names, genders, primary physicians, diagnoses, and detailed treatment notes, to 65 people on the calendar invitation list, 12 of whom were no longer employed at the hospital. 

Why it happened

The breach was driven by a combination of inadequate employee offboarding procedures and agentic AI functionality:

• Corporate offboarding gaps. A physician who left the hospital was never removed from recurring hepatology meeting calendar invites, nor was his access to the hospital's internal calendar infrastructure fully revoked.

• Corporate email use policy violations: Contrary to hospital rules requiring official work email addresses, the former physician maintained access using a personal email address.

• Autonomous bot syncing. The former physician connected Otter.ai to his personal calendar. The tool's auto-join feature ("OtterPilot") detected the upcoming virtual meeting, autonomously joined the call on the former physician's behalf without explicit live host authorisation, transcribed the PHI and automatically shared the output with all calendar invitees.