--- title: How Inadequate Key Control Puts Hospital Patients at Risk description: Key control can hold employees accountable to reduce the risk of drug diversion, data breaches from device theft, and the effects of staffing shortages. image: https://blog.keytrak.com/hubfs/Rich%20Text%20Pasting/unknown-1594927067640.jpg --- [![keytrak](https://blog.keytrak.com/hs-fs/hubfs/unnamed-2.png?width=200&height=72&name=unnamed-2.png "keytrak")](https://blog.keytrak.com) - [Blog Home](https://blog.keytrak.com/) - [KeyTrak](https://www.keytrak.com/) - [Solutions](https://www.keytrak.com/solutions) - [Resources](https://www.keytrak.com/resources) - [Company](https://www.keytrak.com/company/about) ![Gold Bar](https://blog.keytrak.com/hs-fs/hubfs/gold%20bar%20(thin).jpg?width=3000&height=17&name=gold%20bar%20(thin).jpg "Gold Bar") ![Cabinet with Pill Bottles Next to Hanging Keys \[77931956\]](https://blog.keytrak.com/hs-fs/hubfs/Cabinet%20with%20Pill%20Bottles%20Next%20to%20Hanging%20Keys%20%5B77931956%5D.jpg?width=3000&height=604&name=Cabinet%20with%20Pill%20Bottles%20Next%20to%20Hanging%20Keys%20%5B77931956%5D.jpg "Cabinet with Pill Bottles Next to Hanging Keys [77931956]") # How Inadequate Key Control Puts Hospital Patients at Risk ![author icon](https://cdn2.hubspot.net/hubfs/448674/icon%20user-022794-edited.png) By [KeyTrak](https://blog.keytrak.com/author/keytrak) ![tag icon](https://cdn2.hubspot.net/hubfs/448674/icon%20tag-085511-edited.png) [employee accountability](https://blog.keytrak.com/topic/employee-accountability), [security](https://blog.keytrak.com/topic/security), [audit trail](https://blog.keytrak.com/topic/audit-trail), [data breach](https://blog.keytrak.com/topic/data-breach), [hospitals](https://blog.keytrak.com/topic/hospitals), [device theft](https://blog.keytrak.com/topic/device-theft), [opioid epidemic](https://blog.keytrak.com/topic/opioid-epidemic), [medical](https://blog.keytrak.com/topic/medical) How Inadequate Key Control Puts Hospital Patients at Risk 5:06 From [ransomware attacks](https://www.daytondailynews.com/local/ransomware-group-claims-it-stole-more-than-730k-of-files-from-kettering-health/EYBYWY6TSVCNDKEX5GUI6HDULI/) to [workplace violence](https://www.campussafetymagazine.com/news/brutal-attack-on-nurse-prompts-hca-florida-palms-west-hospital-to-boost-security/168314/), ensuring hospital security is more challenging than ever. You likely mitigate external cybersecurity threats by backing up your data and improving your network security. You’ve probably also invested in physical security measures like cameras, metal detectors, public safety officers, and training. But how well do these tactics prevent internal threats involving employee and vendor access? Let’s take a look at how inadequate key control intensifies three major risks to your facility and your patients. ## Major Hospital Risks   ### Drug Diversion   Employee pilferage [accounts for 22% of drug thefts or losses](https://drugabuse.com/featured/ill-inventory/#:~:text=The%20next%20largest%20type%20of%20drug%20theft%20or%20loss%20was%20employee%20pilferage%2C%20at%2022.2%20percent.%20According). In separate cases in Colorado, [two nurses were charged](https://www.9news.com/artiacle/news/crime/colorado-nurses-fentanyl-controlled-substances-cases/73-a1f83d34-a26a-4571-b86a-933c709caf56) with stealing controlled substances from hospital patients. On three or four occasions, one of the nurses used a key to open a machine used to administer medication and removed some of the drug.   > Employee pilferage accounts for 22% of drug thefts or losses. When medical professionals abuse their access privileges to steal narcotics, the [CDC warns that patients suffer substandard care and infection risks](https://www.cdc.gov/injection-safety/hcp/clinical-overview/). In light of these risks, the DEA does not take drug diversion lightly. Healthcare systems that have been investigated by the DEA for recurrent problems with drug diversion due to lax controls and lack of reporting have faced settlements for millions of dollars. For example, a medical center in New Hampshire [paid $2 million](https://www.dea.gov/press-releases/2023/06/22/cheshire-medical-center-pay-2-million-settle-allegations-controlled) and one in Kentucky [paid $4.39 million](https://www.justice.gov/usao-edky/pr/pikeville-medical-center-pay-439-million-resolve-alleged-controlled-substance-act) after failing to keep accurate records of opioids. Consider how well your controls could withstand an investigation in a similar situation.   ### Theft of Devices or Supplies Theft of devices or supplies is another risk that could affect patients' well-being and increase your liability. When a device containing personally identifying information is stolen, the cost is steep. IBM’s [Cost of a Data Breach Report 2025](https://www.ibm.com/reports/data-breach) found that the healthcare industry’s average cost of a data breach is $7.42 million — the highest of all industries for the 12th year in a row.   But it’s not just data at risk. For example, two hospital employees and a medical supply distributor put the public’s health at risk when they [conspired to steal medical devices and supplies](https://www.justice.gov/usao-edmi/pr/former-beaumont-employees-and-medical-device-distributor-charged-wire-fraud-scheme) from the hospital and sold them online. One of the employees used their access to the medical supply and the cleaning and disinfecting rooms at the hospital to steal the items. Some of the supplies had been used in surgical procedures and hadn’t been disinfected. These examples demonstrate that employee accountability is critical to protecting patients. ## Staffing Shortages and Burnout Turnover and burnout has reached critical levels in the healthcare industry. Over the past five years, the average hospital experienced a [107% employee turnover rate](https://www.nsinursingsolutions.com/documents/library/nsi_national_health_care_retention_report.pdf). Meanwhile, as staff struggle to cover essential patient care, access control and other operational processes can fall behind. At best, this issue makes staff’s jobs harder when they don’t have access to areas or supplies they need to do their jobs. At worst, it leaves the door open for staff, contractors, or visitors to exploit key and access control vulnerabilities. --- #### **📖 Related Reading** **[Don’t Let Employee Turnover Sabotage Your Key Control](https://blog.keytrak.com/2019/11/dont-let-employee-turnover-sabotage.html) ** --- ## Mitigating Risks With Key Control Some employees have a legitimate need to access keys to areas where narcotics, sensitive data, or other sensitive assets are stored. But consider these questions: - Are you certain employees always use their keys for the authorized purpose? - Can other employees gain access to those keys? - Do you have a reliable process for retrieving keys when an employee resigns? To protect your facility from liability and protect patients’ well-being, it’s critical to maintain employee accountability. The best way to do so is to create an automatic audit trail of key use that’s not vulnerable to human error or manipulation. Electronic key control systems help you meet this objective. Unlike traditional key storage methods such as desk drawers or pegboards, electronic key control systems typically consist of a [metal drawer](http://keytrak.com/solutions/keytrak?utm_source=KeyTrakBlog&utm_medium=social&utm_campaign=HospitalPatients) or [wall-mounted panel](http://keytrak.com/solutions/keytrak-guardian?utm_source=KeyTrakBlog&utm_medium=social&utm_campaign=HospitalPatients) that physically locks down keys. Some even allow you to set up access levels to ensure that people are only retrieving the keys they need to perform their job duties. In addition, if someone checks out a key outside their shift hours when they have no need to do so, or if they have a key checked out for longer than they should, you can be immediately alerted by text or email. The system is fully automated, so if a security incident occurs, the automatic audit trail can aid in an investigation by providing a report of who checked out keys and when. [![Download our eBook for more key security tips. (1)-1](https://blog.keytrak.com/hs-fs/hubfs/Download%20our%20eBook%20for%20more%20key%20security%20tips.%20(1)-1.png?width=1040&name=Download%20our%20eBook%20for%20more%20key%20security%20tips.%20(1)-1.png)](https://www.keytrak.com/cp/5-steps-make-your-facility-more-secure?utm_source=KeyTrakBlog&utm_medium=social&utm_campaign=HospitalPatients) If employees abuse their access privileges and you don’t have adequate key control measures in place, are you prepared to answer to patients whose health or privacy has been compromised? Can you absorb the cost of compliance fines, rising insurance costs, and more?   [![Read More About Medical Key Control](https://no-cache.hubspot.com/cta/default/6975698/9af64986-e763-4491-9d48-077dd7fa9bd2.png)](https://cta-redirect.hubspot.com/cta/redirect/6975698/9af64986-e763-4491-9d48-077dd7fa9bd2)   *This post was originally published in 2018 and updated in 2025.* SHARE THIS STORY | | [NEXT POST](https://blog.keytrak.com/new-research-smart-locks-vs.-metal-keys-in-multifamily-communities-infographic) ## Related posts #### [How Key Control Helps Jewelry Stores Reduce the Risk of Internal Theft](https://blog.keytrak.com/2014/02/how-key-control-can-help-jewelry-stores.html) #### [Confessions of Former Employees: Key Management Gone Wrong](https://blog.keytrak.com/confessions-of-former-employees-key-management-gone-wrong) #### [Top 4 Physical Security Predictions for 2023](https://blog.keytrak.com/top-4-physical-security-predictions-for-2023) ![KT_GoldBar](https://blog.keytrak.com/hs-fs/hubfs/KeyTrak/KT_GoldBar.png?width=2000&height=27&name=KT_GoldBar.png "KT_GoldBar") - [Blog Home](https://blog.keytrak.com/) - [KeyTrak](https://www.keytrak.com/) - [Solutions](https://www.keytrak.com/solutions) - [Resources](https://www.keytrak.com/resources) - [Company](https://www.keytrak.com/company/about) Follow Us [Facebook Logo](https://www.facebook.com/KeyTrakSystems)   [Twitter Logo](https://twitter.com/KeyTrak)   [Linkedin Logo](http://www.linkedin.com/company/keytrak)   © 2024 KeyTrak. All rights reserved.