Overview
- Josh Cauldwell-Clarke said a hospital letter informed him that several employees accessed his electronic health record on Jan. 18–19 without a work-related reason.
- He posted a follow-up video on Feb. 12 clarifying the breach was directed at him and listing accessed data including his name, birth date, home address, phone number, account number, reason for admission, and clinical details.
- He said he has contacted legal counsel after learning of the unauthorized access and its scope.
- Cauldwell-Clarke alleged staff entered his room while he was medicated and asked for selfies, and that his name was later removed from a notice board to keep attention low.
- The hospital has not been named publicly and has not detailed any disciplinary or corrective steps, although HHS guidance treats such access as a potential HIPAA violation; his earlier Feb. 11 video drew millions of views across platforms.