What Happened
Shelbi Wolken, 35, of Wheat Ridge, Colorado, pleaded guilty to tampering with a consumer product after using her access to patients' medical records to pick up their oxycodone prescriptions at a Denver hospital pharmacy and replace the pills with over-the-counter medication.
Wolken worked as a case management coordinator with access to patients' medical records and personal information. She used that access to pick up patients' oxycodone prescriptions at the in-house pharmacy of Saint Joseph's Hospital in Denver, replacing the stolen pills with over-the-counter medications such as ibuprofen, aspirin, acetaminophen, or loratadine. Investigators found she had picked up roughly 139 prescriptions for about 127 patients between December 2023 and July 2024. Several affected patients reported significant pain and post-surgical complications after unknowingly taking the substituted pills.
Wolken pleaded guilty on March 12, 2026, to tampering with a consumer product. Sentencing is set for June 10, 2026.
What Went Wrong
A non-clinical staff member with record access was able to redirect real patients' prescriptions to herself, at scale, over roughly seven months. Key failures included:
- Medical-record access held by a case management coordinator was sufficient to identify and act on patients' individual prescriptions without a clinical need to do so.
- No control flagged a single employee repeatedly picking up prescriptions on behalf of dozens of different patients.
- Substituted over-the-counter pills went undetected at pickup, allowing tampered bottles to reach patients.
- The scheme was only uncovered after patients reported unexplained pain and post-surgical complications, rather than through internal audit.
How It Could Have Been Prevented
- Restrict non-clinical staff record access to what is required for their role, and log and periodically review high-volume or cross-patient access patterns.
- Require identity verification independent of staff-held credentials when prescriptions are picked up on a patient's behalf.
- Use tamper-evident pill counts or weight checks on dispensed prescriptions to detect substitution before it reaches the patient.
- Treat clusters of patient-reported pain or medication-ineffectiveness complaints as a possible diversion signal warranting investigation.
Related Guidance
- Hospital Diversion Prevention Checklist — Hospital self-assessment, 8 sections 63 items, including access controls and dispensing verification.
- 15 Red Flags of Drug Diversion — Behavioral and transactional indicators including unusual record access patterns.