What Happened
A travel nurse at Raleigh General Hospital in Beckley, West Virginia, used patients' health information and her own biometric credentials to divert hydromorphone from automated medication dispensing/monitoring machines for her personal use.
Employed at the hospital from September 2021 to February 2022, the nurse used her biometrics along with a patient's individually identifiable health information to begin the checkout process for hydromorphone assigned to that patient. Once the machine's secure drawer opened, she siphoned off a portion of the drug and diluted what remained in the vial with another substance so it would appear full, then canceled or nulled the transaction to conceal the removal. She repeated the scheme many times between September 17, 2021 and February 1, 2022.
She pleaded guilty to obtaining a controlled substance by fraud and wrongful disclosure of individually identifiable health information. She was sentenced on July 3, 2025 to five years in prison, followed by three years of supervised release. The West Virginia Board of Registered Nurses has indefinitely suspended her license to practice.
What Went Wrong
A biometric-secured dispensing system did not stop an employee from using her own legitimate credentials to defeat its controls. Key failure points:
- Transaction voiding was not flagged. Canceling or nulling transactions after opening a secure drawer is an unusual pattern that should trigger review, but it went undetected across dozens of instances.
- Patient health information was used as a diversion tool. The nurse accessed real patients' records to initiate withdrawals under their names, meaning the dispensing system's association of a withdrawal with a specific patient did not guarantee the drug reached that patient.
- Diluted vials were not caught before further use. Refilling a partially used vial with a substitute substance to disguise theft requires either weight/volume checks or lab testing to catch — neither appears to have been performed routinely.
- Access patterns were not reconciled against actual patient orders. A months-long pattern of withdrawals tied to voided transactions was not caught until after it had continued for nearly five months.
How It Could Have Been Prevented
- Flag and review every voided or nulled automated dispensing cabinet transaction as a distinct auditable event, not a discarded record.
- Reconcile dispensing cabinet withdrawals against actual physician orders and administration records for the named patient, not just against the withdrawing employee's credentials.
- Perform random weight or volume checks on controlled substance vials to detect dilution before they reach patients.
- Run surveillance analytics on a per-employee basis for unusual patterns of cancellations, high-frequency withdrawals, or after-hours access.
- Require independent verification when a nurse repeatedly accesses medications for patients outside her normal assignment.
Related Guidance
- Hospital Self-Assessment Checklist — Hospital self-assessment, 8 sections and 63 weighted items.
- Diversion Surveillance SQL Playbook — Queries for detecting dispensing/administration mismatches and voided-transaction patterns.
- 15 Red Flags of Drug Diversion — Behavioral and transactional indicators of diversion by clinical staff.
- Investigation Playbook — How to run an internal diversion investigation when staff or product integrity is questioned.
- Employee Screening & Fitness for Duty — Vetting and monitoring standards for staff with controlled-substance access, including travel and contract staff.