Skip to main content
NOPE
Medium reported severity

Texas health plan says an employee uploaded a file of members' personal and prescription data to ChatGPT from a home network, against its policy

Community First Health Plans, a nonprofit health plan in San Antonio, Texas, said in a 29 June 2026 release that on the evening of 29 April 2026 one of its employees uploaded a file containing personal information of some members to ChatGPT from a home computer network, circumventing the plan's firewall safeguards and violating its policy. The plan says it does not use ChatGPT and that its systems detected the violation and alerted its IT department. According to the release, the file may have included members' names, addresses, dates of birth, member identification numbers and prescription drug information. The next morning the plan revoked the employee's access, directed and verified deletion of the data from the employee's ChatGPT account, asked OpenAI to delete any related data, and ended its relationship with the employee. It notified affected members and federal and state agencies, offered 12 months of identity monitoring and says it is not aware of any misuse. The release gives no number of affected members.

AI system
ChatGPT
Occurred
29 Apr 2026
Reported
29 June 2026
Event location
Unknown
What the AI did
Received personal information about the person
Reported harm
Other Material Harm
Whose AI use
Someone else’s AI use
Setting
Health · Work · Privacy
Evidence
AI involvement reported · Causal attribution supported · 1 source
3 claims: 3 reported. 5 open questions
People reported harmed
Not reliably quantifiable from the sources

AI system as recorded: ChatGPT (OpenAI), used by an employee from a home computer network in breach of the health plan's policy; the plan says it does not use ChatGPT

What Happened

The upload. The release says: "On the evening of April 29, 2026, a Community First employee uploaded a file containing personal information of some Community First members to ChatGPT from a home computer network, circumventing Community First firewall safeguards and violating Community First policy." The plan says it does not use ChatGPT and that its systems immediately detected the violation.

What the file held. According to the plan's investigation, the affected categories were name, address, date of birth, member identification number and prescription drug information. The release describes the incident as involving protected health information.

The response. The plan says it revoked the employee's access, directed and verified that the employee deleted all personal information from their ChatGPT account, contacted OpenAI to demand deletion of any related data, retrieved the information from the employee and ended its relationship with the employee. It notified federal and state agencies, is mailing affected members offers of 12 months of identity monitoring, and is adding log-on time windows and mandatory VPN connections. It says it is not aware that anyone's information has been misused.

Reported harm

According to the health plan, an employee uploaded a file containing some members' names, addresses, dates of birth, member identification numbers and prescription drug information to ChatGPT on 29 April 2026, in breach of its policy; the plan notified members, offered identity monitoring and says it knows of no misuse.

Outcome

Ongoing

The plan ended its relationship with the employee, asked OpenAI to delete related data, notified regulators and members, and offered 12 months of identity monitoring. No reply from OpenAI is reported and no misuse is known.

What remains unknown

  • How many members' information was in the uploaded file.
  • What the employee was using ChatGPT for and which account type was used.
  • Whether OpenAI replied or confirmed deletion, and whether the data was retained or used for training.
  • Where the employee's home network was located.
  • Whether any regulator has acted on the notification.

What the evidence supports

AI involvement: reported. The health plan states that its employee uploaded a file of members' personal information, including prescription drug information, to ChatGPT from a home network in breach of policy, that its systems detected the upload, and that it had the data deleted from the employee's ChatGPT account and asked OpenAI to delete related data. The privacy harm is that transfer of members' information into an AI service without their knowledge. The release reports the transmission; it does not report any ChatGPT output about the members, any retention finding or any use in training.

3 claims: 3 reported. What the statuses mean

Reported The health plan says that on the evening of 29 April 2026 an employee uploaded a file containing personal information of some members to ChatGPT from a home computer network, circumventing its firewall safeguards and violating its policy, and that its systems detected the violation.

Causal attribution. The plan's own account of its employee's action; no independent account was inspected.

  • communityfirsthealthplans.com(opens in new tab) supports · English
    'On the evening of April 29, 2026, a Community First employee uploaded a file containing personal information of some Community First members to ChatGPT from a home computer network'; 'Community First does not utilize ChatGPT, and our systems immediately detected the violation and notified our IT department.'
Reported The plan says the affected information may have included members' names, addresses, dates of birth, member identification numbers and prescription drug information.

Causal attribution. The plan's description of the file's contents.

Reported The plan says it had the employee delete the data from their ChatGPT account, asked OpenAI to delete related data, ended its relationship with the employee, notified agencies and members, offered identity monitoring and is not aware of any misuse.

Causal attribution. The plan's statement of its response; OpenAI's reply, if any, is not reported.

  • communityfirsthealthplans.com(opens in new tab) supports · English
    'directed and verified that the employee had deleted all personal information from their ChatGPT account'; 'contacted OpenAI, LLC (the operator of ChatGPT) to demand deletion of any related data'; 'promptly ended with its relationship with the employee'; 'complimentary identity monitoring services for twelve (12) months'; 'Community First is not aware of any impacted information having been misused'

Sources

1 source inspected. Sources that repeat one account do not corroborate each other.

How the sources were read, and where the events happened

Read in English on 2026-10-12 from the plan's own press-release page; no translation needed. The research agent (an AI) read the text directly. Applies to s1.

Event countries: Unknown. Affected-person countries: United States. Court countries: Unknown.

The affected people are members of a nonprofit health plan that the release places in San Antonio, Texas and the Bexar service area. The release says the upload was made from a home computer network without saying where, so no event country is recorded. No court is involved.

Reviewed for publication 2026-10-12: Published under the 2026-10-06 private-information ruling: the health plan's own release describes an employee actually uploading a file of members' personal and prescription information to ChatGPT, without the members' knowledge and against the plan's policy. All facts are attributed to that release; the number of members and OpenAI's response are unknown.

People described

Members of Community First Health Plans, a nonprofit health plan in the Bexar service area of Texas, whose personal information was in the uploaded file

People reported harmed in this case

Not reliably quantifiable from the sources

The plan's release refers to 'some Community First members' and 'affected Members' but gives no number, so no count is recorded (numeric zero placeholders). The employee who uploaded the file is not counted.

Counted once within this case. The same person may appear in other cases. This count does not establish AI causation.

Tags

#privacy#health-data#chatgpt#unauthorised-ai-use#health-plan#employee

Cite this case

Compiled per our published methodology: verification statuses, sourcing standards, and corrections process.

APA

NOPE. (2026). Texas health plan says an employee uploaded a file of members' personal and prescription data to ChatGPT from a home network, against its policy. AI incidents. https://nope.net/incidents/2026-texas-health-plan-employee-uploaded-members-personal-and-prescription-data-to-chatgpt

BibTeX

@misc{2026_texas_health_plan_employee_uploaded_members_personal_and_prescription_data_to_chatgpt,
  title = {Texas health plan says an employee uploaded a file of members' personal and prescription data to ChatGPT from a home network, against its policy},
  author = {NOPE},
  year = {2026},
  howpublished = {AI incidents},
  url = {https://nope.net/incidents/2026-texas-health-plan-employee-uploaded-members-personal-and-prescription-data-to-chatgpt}
}

Related cases

High ChatGPT (reported)

Eindhoven municipality says staff uploaded files with residents' youth-care and social-support data and applicants' CVs to public AI websites such as ChatGPT

The municipality of Eindhoven in the Netherlands told its council in an information letter shared on Thursday 18 December 2025 that a sample of staff data traffic from 23 September to 23 October 2025 showed files containing personal data of residents and employees had been sent to public AI websites such as ChatGPT, according to Omroep Brabant and Binnenlands Bestuur. The files included youth-care (Jeugdwet) documents, internal reports and CVs, mostly from departments that provide care and support to residents. According to Omroep Brabant's account of findings by the advisory firm Hooghiemstra & Partners, the youth-care documents held information about the mental and physical health of minor children, and social-support (WMO) documents and applicants' CVs were also entered. The municipality reported the breach to the Dutch Data Protection Authority on 23 October, blocked public AI websites and asked OpenAI to delete the files. The council says the scale cannot be determined because the data was kept for only 30 days, so it cannot inform those affected, and that the risk of misuse is limited but cannot be ruled out. A spokesperson said OpenAI had not yet replied.

Medium Unidentified OpenAI generative AI service (reported)

Health-guidance contractor says an employee entered insured members' names and disease information into an unauthorised external generative AI service

A local-government employees' mutual aid association said in a notice dated 4 September 2026 that RIZAP, the company it contracts for specific health guidance, had reported that on 20 August 2026 it emerged that a RIZAP staff member, during data-extraction work, had entered data containing personal information into an external generative AI service that RIZAP did not permit. The association says 726 of its members across 14 branches are covered and lists the data as membership numbers, email addresses, names, dates of birth, sex, some addresses and phone numbers, the type of health guidance and, for members with them, high blood pressure, diabetes or dyslipidaemia. The IHI group health insurance society reported 210 of its members in a 2 September notice that, according to a security news site, names OpenAI as the provider, says the matter came to light through the employee's own report, and says OpenAI answered on 1 September that the data had not been used for model training. RIZAP's own release, as described in an ITmedia column, says the information was uploaded by mistake to a generative AI service the employee used privately, and that the company confirmed no possibility of viewing by third parties other than the service operator or of use in training. Whether the provider's staff could view the data was still being checked when the insurers published.

Low ChatGPT

Adult ChatGPT Plus subscriber says the account was classified as a teen and restricted, and that OpenAI said profiling had to come first; first-person post

In a Reddit post of 11 October 2026, a ChatGPT Plus subscriber who says they are an adult (36, by the post's own account) writes that when OpenAI's age checks rolled out their account was classified as a teen account and put on a restricted account. The poster says they had earlier emailed OpenAI asking for verification options without ID or a photo, received a canned reply about the verification provider Persona, and on escalating to data protection was told they had to be profiled first. The poster says they then cancelled the subscription. OpenAI's Help Center says ChatGPT uses an age prediction system that reads account signals, automatically enables the teen experience when it predicts an account may belong to someone under 18, can get this wrong, and lets adults verify their age to remove it. The account is the poster's own and is not corroborated.

Low ChatGPT

NSW Reconstruction Authority says a former temporary staff member uploaded 2031 Resilient Homes participants' personal data to ChatGPT without authorisation

The NSW Reconstruction Authority says that between 12 and 15 March 2025 a former temporary staff member (called a former contractor in its first notice) uploaded a Microsoft Excel spreadsheet of Northern Rivers Resilient Homes Program information, 10 columns and more than 12,000 rows, to ChatGPT, an AI platform the Authority had not authorised. The Authority disclosed the breach on 6 October 2025, estimating that up to 3000 people were affected, and later said external forensic analysis confirmed that 2031 people had some of their data uploaded, including names, contact details, addresses, dates of birth, sensitive personal and health information and limited financial commentary. It says no driver licence, Medicare, passport or Tax File Numbers were disclosed and that there is no evidence the data is publicly available or was accessed by a third party; whether OpenAI retained or used the data is not addressed. The Authority apologised, contacted affected people with ID Support NSW, offered to compensate the replacement of compromised identity documents and notified the NSW Privacy Commissioner. A program participant told the ABC the information was deeply personal and that they felt concerned. No misuse of the data is reported.

If you or someone you know is struggling, free and confidential support is available. Find a helpline near you at Signpost.

Back to all incidents