What Happened

Della Rae Thalin, a nurse at a Minnesota hospital, used her unique login credentials to access automated medication dispensing/monitoring cabinets and remove hydromorphone for her own use.

Over roughly three weeks in February and March 2011, Thalin obtained hydromorphone by accessing drug storage cabinets using her personal user identification and password, then took the drug out of the hospital. The Department of Justice press release announcing her sentence did not name the specific hospital involved.

She was charged in August 2011 and pleaded guilty in October 2011 to obtaining a controlled substance by fraud. On January 20, 2012, U.S. District Court Judge Ann D. Montgomery sentenced her to three years of probation.

What Went Wrong

Credentialed access to an automated dispensing cabinet was not enough on its own to catch a short but concentrated diversion pattern. Key failures included:

  • Withdrawals tied to a single nurse's login over a compressed window were not flagged for review before the pattern was reported.
  • Cabinet withdrawals were not reconciled in real time against documented patient orders and administration records.
  • The drug leaving the building with the employee, rather than being administered on-site, was not independently caught by inventory controls.

How It Could Have Been Prevented

  • Set automated alerts for a single login's withdrawal volume or frequency exceeding unit norms over a short time window.
  • Reconcile automated dispensing cabinet withdrawals against physician orders and administration records on an ongoing basis, not periodically.
  • Require witnessed waste documentation for any controlled substance withdrawn but not fully administered.
  • Audit for discrepancies between cabinet withdrawal counts and documented patient administration by individual credential.

Related Guidance

Sources