AITAH For being furious after daughters RN stepmother repeatedly breached our medical records to influence court cases and still holds a license?

A mother’s trust shattered when she learned her daughter’s stepmother, a registered nurse, had secretly accessed their medical records to manipulate court cases. The revelation surfaced during a criminal case triggered by the father’s assault on their daughter, with the stepmother’s testimony exposing her unauthorized actions. This breach, uncovered in the hospital where the mother also worked, revealed a disturbing abuse of professional access.

The mother’s relentless pursuit of accountability—through hospital audits, complaints to federal and state authorities, and media outreach—met with frustrating delays. Despite the stepmother’s termination, her nursing license remains active, and the investigation drags on. This saga unveils the vulnerability of medical privacy and the pain of institutional inaction, drawing readers into a mother’s fierce battle to protect her daughter’s safety and dignity.

ADVERTISEMENT

‘AITAH For being furious after daughters RN stepmother repeatedly breached our medical records to influence court cases and still holds a license?’

Hi everyone! Posting here because I'm at my wits end with the injustice of this and need to know if anyone has experienced something similar. Last year, my daughters father physically assaulted her during a visitation under the guise of 'parental discipline' while his wife watched and did nothing.

I reported the incident to authorities which prompted charges and opened a criminal court case. These actions made the couple file 7 motions in probate court riddled with false allegations to attempt to hide what occured. While the charges were going through criminal court, his wife testified on his behalf.

During her testimony, something she said led me to believe she had been in my daughter's medical records, as she was a nurse at the same hospital. I also work there. I drove immediately to the hospital and requested an audit through patient advocacy. They confirmed my suspicions, that she had been in both of our charts MULTIPLE times in the past year ( that I know of).

ADVERTISEMENT

The hospital seemed to try to keep this on the hush so I contacted the DOJ, AG and the BON myself. Worth mentioning that a year prior, I had reported to the same hospital that she told my daughter her grandmother was admitted and that I was lying to her. She had seen my brother there visiting a friend's mother, not her grandmother who was NOT in the hospital.

This caused my daughter great distress and was clearly an attempt at violating hipaa. They did nothing. After being a squeaky wheel to the health organization, I was informed she was at least fired. The BON has at least opened an investigation and I have recieved no updates since, almost a year ago now.

Her nursing license is still active and it's my understanding that the investigation could take years. To say I feel violated would be a massive understatement. I no longer feel safe to recieve care locally because I have no idea where she could be, aside from the organization I work for.

ADVERTISEMENT

I don't feel as though justice has been served here and that she should no longer be allowed to practice nursing due to her egregious behavior. Not only did she breach our records multiple times, but attempted to sway the court system with this stolen information. I am beside myself. Has anyone experienced something similar?

Is there more I could be doing since it seems as though this is being swept under the rug? I'm honestly disgusted at the blatant disregard for our privacy, lack of repercussions or even information regarding the investigation. It seems as though these organizations are more interested in covering this up and ignoring it. Thanks for letting me vent if nothing else lol.

UPDATE I've just sent an email to as many local investigative journalists and news stations that I could find. I appreciate everyone who has taken the time to follow this. Here is the email;. To Whom It May Concern, A registered nurse, ( Her name and license number) in Massachusetts, has repeatedly accessed and exploited private health information, using her professional credentials. 

ADVERTISEMENT

These breaches were not accidental but deliberate, with apparent malicious intent—yet shockingly, she has faced no disciplinary action or legal consequences to date. This is not only a violation of HIPAA but a deeply disturbing example of how medical authority can be misused with impunity. 

The public deserves to know how vulnerable their health data is—even from those they are meant to trust the most.. I urge your agency to investigate and expose this case to ensure accountability and prevent future abuses.. Unresolved and Ongoing Issues:.

She used the illegally obtained health data in court to try and manipulate the outcome in her husband's favor.. We are unable to safely seek medical care locally, as I don’t know where she may be employed next.. The lack of consequences and transparency makes me feel utterly violated, powerless, and unsafe.

ADVERTISEMENT

The Board of Nursing opened an investigation, but I have received no updates in nearly a year. Not only is her nursing license still active, but it was renewed.  I am writing to request your attention and possible assistance in a deeply disturbing case involving HIPAA violations, medical privacy abuse, and the failure of legal and healthcare institutions to protect my daughter and me.

Despite doing everything in my power to report, escalate, and provide documented proof, I have been met with silence, delay, and what appears to be a coordinated effort to avoid accountability. Last year, during a visitation, my daughter was physically assaulted by her father while his wife watched and did nothing. I reported the incident to authorities. 

Despite clear evidence, local police (relatives and comrades of the father) declined to press charges. I had to file directly with the court, which found sufficient grounds to issue criminal charges.  In retaliation, the father and his wife filed seven motions in probate court filled with false accusations seemingly designed to obscure what had occurred and discredit me.

ADVERTISEMENT

During court proceedings, his wife — who was employed as a nurse at the same hospital where I also work, testified in his defense. During her testimony, it became clear that she had accessed private medical information about my daughter and me. I immediately requested a hospital audit through patient advocacy.

The audit confirmed multiple unauthorized accesses to both of our medical records over the course of a year. She had no clinical role or justification to access these charts. A year prior, she had also lied to my daughter about a supposed family hospitalization, causing significant distress — another incident based on unauthorized access.

The hospital initially appeared to minimize the severity of the breach. I had to contact the Department of Justice, the State Attorney General, and the Board of Nursing directly. Only after considerable pressure was I informed that she was terminated from her role.

ADVERTISEMENT

Despite the clear pattern of abuse, privacy violations, and misuse of protected information, it feels as though every system designed to protect patients and families is either unwilling or unable to act. I am seeking any support, legal guidance, or public exposure you can offer.

This is not just a personal injustice — it is a warning about the gaps in our medical privacy protections, the abuse of institutional power, and the weaponization of confidential information in court.

Please let me know if you’re willing to speak further or connect me to someone who might help amplify this issue. I have full documentation of the audit, court filings, and complaint confirmations if needed.. I greatly appreciate your time and consideration.. Sincerely,. (My contact info)

ADVERTISEMENT

The stepmother’s unauthorized access to the mother and daughter’s medical records violates the Health Insurance Portability and Accountability Act (HIPAA), which protects patient health information. Her deliberate use of this data to influence court proceedings qualifies as a serious breach, potentially incurring fines up to $50,000 per violation and jail time for malicious intent. The hospital’s audit, confirming multiple accesses, aligns with HIPAA-compliant systems like Epic, which log all record interactions for such investigations.

This case reveals gaps in healthcare oversight. Small-scale breaches, like this one, often escape federal scrutiny, as a 2015 ProPublica report noted, despite causing significant harm. The hospital’s initial hesitation and the Board of Nursing’s slow investigation reflect systemic challenges, with the Office for Civil Rights (OCR) prioritizing large-scale violations. The mother’s loss of trust in local healthcare highlights the emotional toll of such breaches, undermining confidence in medical systems.

The stepmother’s active nursing license, despite her termination, points to sluggish regulatory processes. A 2025 HIPAA Journal article explains that nursing boards may impose sanctions from retraining to revocation, but investigations often take years. The mother’s media outreach is a savvy tactic, as public pressure can accelerate action. Her fear of local care reflects a broader issue: a 2020 study found 30% of patients avoid care after privacy breaches due to distrust.

ADVERTISEMENT

Legally, HIPAA offers no direct lawsuit option, but state laws like negligence or breach of confidentiality could apply, as seen in a 2019 Vermont case. The mother could consult a plaintiff’s attorney to pursue civil damages against the nurse or hospital, leveraging the audit evidence. Her proactive steps—reporting, documenting, and publicizing—position her well to demand accountability, emphasizing the need for stronger protections against medical privacy abuse.

Here’s what Redditors had to say:

Reddit’s community voiced strong support for the mother, denouncing the stepmother’s HIPAA violations as unethical and illegal. They condemned her misuse of medical data to manipulate court outcomes, viewing it as a profound betrayal of trust and a threat to patient safety.

The crowd urged the mother to escalate the issue through legal action and media exposure, praising her persistence. They saw the stepmother’s actions and the hospital’s inaction as a dangerous failure, reinforcing the need for swift consequences to prevent future breaches.

ADVERTISEMENT

O-Block-O-Clock − Get a consult with a Plaintiff's attorney. It's possible you have damages and a claim against her (individually) and her employer.

Substantialgood4102 − Get an attorney with expertise in HIPAA violations and file against her and her employer. Contact the state regulatory agency and file a complaint there as well. It is a HIPAA violation to access medical records for patients for reasons other than medical treatment.

WanderingYeti07 − you can file a complaint directly with the nursing board of the state you live in. you can look up her license number online as it's public information as you will likely need it to file the complaint.

ADVERTISEMENT

ben_kosar − I worked IT in a visiting nursing service. And damn near every healthcare system uses either Epic (the majority on some level) or McKesson. These are very complex HIPAA complaint systems that store and transmit patient data. The short of it is: Very complex on the back end.

Damn near every system - Especially EPIC, stores who accesses every single patient. For cases like this. The company or a governing body/org can request records to see who accessed the records - records that can't just be magicked away. Any healthcare company I now has a rule that you can't access family members/people you know's records.

People got routinely fired during my 5 year tenure for doing this. It's likely if you wanted to push it, you could get someone easily fired, possibly fined (possibly not losing a license, that's harder to prove, but HIPAA will absolutely fine) - but with that evidence in hand, you have a pretty strong case for a laywer to sue and receive some real money damages. Possibly a spin into harassment charges or such.

ADVERTISEMENT

SensationalSadiee − NTA, It’s heartbreaking that you've had to go through so much just to seek basic justice, but you’re doing everything right by speaking up, advocating fiercely, and refusing to be silenced.

Mindless_Dependent39 − Contact your local news. Post it all over their twitter and other social pages. Make it viral.

cutey513 − I, too, would feel violated and disgusted. I don't believe HIPAA is your issue. This sounds like straight up criminal fraud and ethics violations. Any HR department worth their salt would try to get around confirmation of this. They are definitely liable for the security breach and fraud.

ADVERTISEMENT

Whoever is the credentialing agency for your hospital would put much needed heat on them to act. I work in behavioral health so CARF is my hospital credentialing agency.. Best of luck!

starksdawson − That is quite literally illegal. She blatantly violated HIPAA and not only could she have her license revoked, she could be charged, and rightfully so. Decent medical centers don’t f**k around with HIPAA. She is a bad person and she is a danger to her patients and to you.

In some states, accessing medical records without permission and for personal gain/malicious intent can send her to jail for up to 10 years and make her pay up to $250k. She is playing with fire here.. NTA. Sue her.

ADVERTISEMENT

Crazy4Swayze420 − Sue the hospital. They will cave and pay you off because they fear HIPAA more than your lawyer. The one who accessed your daughter's records could more than likely go to jail and pay a lot in fines. HIPAA can charge anywhere from 50k to 1.5 million PER offense.

Meaning each time she accessed your daughters account she did in fact violate hippa. and is another charge as that falls under the harshest penalizes for HIPAA. Idk how much you looked into HIPAA penalties but what she did would fall under the harshest because there was malice behind the access.

She could be looking at 50k to 1.5 million each time she accessed your daughter's account and even up to 10 years in jail. No way the hospital protects her because HIPAA will audit them and their legal team will be way to busy with that to deal with your case.

ADVERTISEMENT

The fact that the hospital knows and is leaning towards covering it up means you own them. They'd rather pay millions to you than have HIPAA breathing down their necks over everything they do. Hipaa is a monster you don't want to make mad.

little_Druid_mommy − Get an attorney and fight this like hell! Sue *everyone*, even the hospital. Seriously, make a spectacle. NTA

This mother’s fight exposes a raw blend of personal betrayal and systemic shortcomings. The stepmother’s audacious breach of medical records, coupled with her unchanged professional status, stings as a miscarriage of justice.

ADVERTISEMENT

Yet, the mother’s dogged pursuit—through audits, complaints, and public calls—stands as a testament to her resolve to safeguard her daughter. Ever faced a violation that shook your trust in a system? Share your stories below—let’s dive into this gripping tale of privacy, accountability, and a mother’s unyielding stand!

Share this post

Related Posts

Leave a Reply

Your email address will not be published. Required fields are marked *