What Happened
A licensed pharmacy technician at Sentara Norfolk General Hospital in Virginia was responsible for restocking the hospital's automated medication dispensing/monitoring system with controlled substances — and used that access to steal more than 50,000 dosage units over an 18-month period.
From April 2018 to October 2019, the technician stole a variety of prescription medications, including thousands of opioid pills, and falsified the dispensing system's records to cover his theft. He avoided camera systems and intercepted daily audit reports that would have confirmed his diversion while on duty, replacing them with reports pulled from cabinets he had not accessed or diverted from.
The scheme was uncovered by the supervising pharmacist and another technician while he was on personal leave from the hospital. He pleaded guilty to acquiring controlled substances through fraud, facing a maximum penalty of four years in prison.
What Went Wrong
A single technician was able to divert tens of thousands of dosage units over a year and a half by manipulating the very audit reports meant to catch him. Key failures included:
- The same person responsible for restocking the dispensing system was able to generate and substitute the audit reports meant to check his own activity — a segregation-of-duties failure.
- Camera coverage of the restocking and dispensing area existed but was evidently avoidable, and its footage was not being independently cross-checked against dispensing logs.
- No one else was routinely reviewing the underlying cabinet-level withdrawal data directly; the falsified summary reports the technician provided were relied upon instead.
- The theft surfaced only when the technician was away from work and unable to continue intercepting reports, rather than through a proactive detection control.
How It Could Have Been Prevented
- Ensure the staff member who restocks a dispensing cabinet is never also the sole reviewer of that cabinet's audit and discrepancy reports.
- Pull cabinet-level transaction data directly from the system for independent review rather than relying on technician-generated summary reports.
- Review camera footage of controlled-substance restocking areas on a sampled, unannounced basis, independent of staff scheduling.
- Set an organizational policy that discrepancy reports must be reviewed by someone other than the staff member whose activity they cover, with no exceptions for trusted long-tenured employees.
Related Guidance
- Hospital Diversion Prevention Checklist — Segregation-of-duties and audit-review controls for pharmacy staff.
- 15 Red Flags of Drug Diversion — Recordkeeping manipulation and report-avoidance indicators.
- Investigation Playbook — Investigating diversion when reporting controls themselves may have been compromised.
- Diversion Case Registry — Other hospital pharmacy-technician diversion cases.