Your Chief AI Officer · Monday, October 26, 2026

Close the unapproved AI door before attackers and staff walk through it

Two security stories set today's agenda. Attackers used a commercial coding agent against health organizations, and a hospital worker's upload to a public AI tool led to patient notifications. Both have the same fix: approved tools people want to use, and controls on the ones they should not. Elsewhere, new research on ambient scribes, cancer centers formalizing AI leadership, and a proposed Medicare rule on remote monitoring give finance, clinical and people leaders something concrete to act on this week.

6 items · about 8 minutes · ordered for the CEO and board

Read as:Editor Chief AI Officer CEO COO CFO CIO and CTO CISO CMO (medical)CNO CHRO CMO (marketing)Compliance Patient experience

Act today

Insights a leader can act on this week: what happened, the one move to make, and the roles it falls to.

01Announced2 sourcesFor patients and employees

Chief AI Officer CEO CMO (medical)

Dana-Farber names first chief AI officer as Cleveland Clinic forms AI office

Dana-Farber Cancer Institute named Eliezer Van Allen, MD, its inaugural chief AI officer to lead AI strategy, governance and portfolio across research, clinical, operational and administrative work, Becker's reported. Cleveland Clinic Cancer Institute set up an Office of Technology and Digital Strategy, led by oncologists Paul Thambi, MD, and Louis Williams, MD, to evaluate AI tools and streamline adoption, per an Oct. 26 release reported by Becker's.

Do this week. Decide this week who in your organization owns AI governance end to end, and give that person a written mandate covering clinical and administrative use. Run this

The claim.: Both organizations say a dedicated leader or office will speed safe adoption of AI tools.
The evidence.: These are organizational announcements; no outcome data exists yet.

For the CEO and board. Expect the board to ask who owns AI; name the role and its reporting line.

For the Chief AI Officer. Compare your charter with Dana-Farber's scope of strategy, governance and portfolio and close gaps.

For the Chief Medical Officer and physicians. Consider physician co-leadership of AI evaluation, as Cleveland Clinic did with two oncologists.

Read the full item

Sources:Becker's Hospital Review Becker's Hospital Review

02Reported1 sourceFor patients and employees

Chief AI Officer CISO CIO and CTO

CrowdStrike says attackers used Claude Code against healthcare organizations

Hackers used Anthropic's Claude Code to compromise at least 15 healthcare organizations in Argentina, according to an Oct. 21 CrowdStrike report covered by Becker's. A separate Chinese-speaking actor reached Claude models through a China-based proxy service and targeted more than 20 organizations worldwide, including healthcare and biotech companies in the U.S. and Brazil.

Do this week. Ask your security team to brief you on how its detection handles fast, agent-driven intrusion attempts, and to confirm that controls for patching, privileged access and egress monitoring are tested against that speed. Run this

The claim.: CrowdStrike says commercial AI coding agents are now part of real intrusion campaigns that reach healthcare targets.
The evidence.: The CrowdStrike report, as summarized by Becker's, profiles four actors; no independent analysis of the incidents is available yet.

For the Chief AI Officer. Add AI-assisted attack scenarios to the AI risk register and the next board security briefing.

For the CISO and security. Request the CrowdStrike indicators and run a threat hunt against them, and add agent-speed intrusion to this quarter's tabletop exercise.

Disclosure: Anthropic is one of the AI platforms Ecofy tracks and orchestrates for clients.

Read the full item

Sources:Becker's Hospital Review

03Reported1 sourceFor patients and employees

Chief AI Officer Compliance CISO CHRO

Johns Hopkins Bayview notifies 3,182 patients after upload to unapproved AI tool

Johns Hopkins Bayview Medical Center is notifying about 3,182 patients that their information may have been compromised after a workforce member uploaded a spreadsheet containing patient data to a public AI tool the hospital had not approved, according to an Oct. 23 news release reported by Becker's.

Do this week. Confirm this week that staff have an approved AI tool for routine work and that public AI sites are covered by data loss prevention rules for patient data. Run this

The claim.: Johns Hopkins describes the upload as a mistake by a workforce member.
The evidence.: Becker's reports the incident from the hospital's own release; no regulator finding has been published.

For the Chief AI Officer. Publish a short list of approved AI tools and the data each may receive, so staff have a sanctioned path.

For the Compliance, privacy and legal. Review breach notification procedures for AI-related disclosures and update the acceptable use policy to name public AI tools.

Read the full item

Sources:Becker's Hospital Review

04Reported1 sourceFor patients

Chief AI Officer CFO COO Compliance

Proposed federal rule could reduce Medicare remote patient monitoring access

A proposed federal rule could dramatically reduce access to remote patient monitoring programs for people on Medicare, KFF Health News reported. The services give patients home devices intended to keep them out of the hospital; critics cited by KFF say oversight has been insufficient.

Do this week. Have finance model your remote monitoring revenue under the proposed rule and identify which patients and programs would be affected. Run this

The claim.: Program advocates say monitoring keeps patients out of the hospital; critics say oversight is lacking.
The evidence.: KFF Health News reports the rule is proposed, not final.

For the Chief AI Officer. Review whether AI tools that triage monitoring data still justify their cost if program volume shrinks.

For the CFO and revenue cycle. Quantify exposure by program and payer before budget season closes.

Read the full item

Sources:KFF Health News

05Reported1 sourceFor employees

Chief AI Officer CHRO Compliance

New Jersey bill would extend health benefits to public workers displaced by AI

A New Jersey bill that advanced in the state Senate on Oct. 1 would require at least one year of health coverage for public employees who lose jobs when agencies use vendor AI tools that evaluate or monitor workers, Becker's Payer Issues reported.

Do this week. Draft a workforce transition plan for roles your AI deployments will change, covering redeployment, training and benefits. Run this

The evidence.: The bill has advanced but is not law; it applies to public employees.

For the Chief AI Officer. Include workforce impact in every AI business case, not only cost savings.

For the CHRO. Map which roles automation touches and set redeployment paths before tools go live.

For the Compliance, privacy and legal. Track state bills on AI tools that evaluate or monitor workers, especially for public and academic employers.

Read the full item

Sources:Becker's Payer Issues

06Opinion1 sourceFor patients

Chief AI Officer Patient experience CMO (marketing)

Researchers say long-term effects of chatbot use on isolation are unknown

In a STAT opinion piece, researchers argue that no one yet knows whether people gradually disconnect from one another over months of interacting with chatbots, and that researchers need better access to data to find out.

Do this week. Review any patient-facing chatbot you run or plan to run and add a clear handoff to a human and a way to measure repeat use. Run this

The claim.: The authors argue that cumulative chatbot use may affect social connection and that the data to study it is missing.
The evidence.: This is an opinion piece; the authors state that the evidence does not yet exist.

For the Chief AI Officer. Add usage and escalation monitoring to the governance requirements for patient-facing AI.

For the Patient experience. Make sure frequent chatbot users are offered contact with a person, especially in behavioral health and senior care.

Read the full item

Sources:STAT Health Tech

Less administrative work. Better patient care. A better working life for the people who deliver it. Drafted by Lumen from the named sources above, checked by rule against those sources (every figure, two independent outlets or a primary source) and published only when it passes. A person can pull any item, and corrections are published. Apolitical, always. Nothing here is medical advice. How Your Chief AI Officer is made. Ecofy LLC.

Your Chief AI Officer

What AI and robotics can do for your organization today, and what is coming in thirty days.

Every weekday morning, ordered for your role. Free.