“Hope You Can Handle Basic Procedures,” the Chief Surgeon Told Me — Hours Later, He Was Watching Me Perform Emergency Brain Surgery

PART 2

Gerald Knox could not wait for us to solve a dead surgeon’s paperwork.

His heart rate climbed to 126.

Lactate rose.

Pain became constant.

We took him to surgery.

Marcus scrubbed beside me.

Neither of us mentioned Harold Vance until Gerald was anesthetized.

Then Marcus said:

“The note could be migrated data.”

“Possibly.”

“Old template.”

“Possibly.”

“Wrong date.”

“Possibly.”

“You’re enjoying this.”

“No.”

“Yes, you are.”

“I enjoy explanations that survive checking.”

We entered laparoscopically.

The bowel told us almost immediately that the CT had been right.

A loop of small intestine had slipped through a mesenteric defect created during Gerald’s previous gastric bypass.

Twisted.

Dark purple.

Venous congestion.

Not dead yet.

Close.

Marcus said:

“Internal hernia.”

“Yep.”

We reduced it carefully.

Blood flow returned slowly.

The bowel changed from dusky purple toward pink.

Good.

Then I saw something else.

Gerald’s anatomy did not match the operative note.

According to the 2024 report, Vance had revised the gastrojejunal connection and closed both major mesenteric defects.

One defect in front of us was wide open.

No evidence it had ever been sutured.

Marcus leaned closer.

“Could have reopened.”

“Yes.”

“You don’t believe that.”

“I don’t know.”

We inspected the prior anastomosis.

There had been a revision.

Definitely.

But the suture pattern was unusual.

Running barbed material.

Modern.

Harold Vance had been famous for interrupted silk in revisions.

That fact by itself meant nothing.

Surgeons change technique.

Dead surgeons do not.

We completed Gerald’s repair.

No bowel resection.

Good outcome.

He would likely recover completely.

At 2:04 a.m., Marcus and I sat at a computer outside OR 4.

He opened the full audit view of Gerald’s 2024 operation.

The operative report had been entered electronically at 3:12 a.m.

Two days after surgery.

Author:

HAROLD VANCE, MD.

Authentication:

Electronic signature.

Co-surgeon:

Blank.

Assistant:

Blank.

Anesthesiologist:

Dr. Priya Shah.

Marcus called her.

She answered after six rings.

“Hale, someone better be dying.”

“No. Quick question. March seventeenth, 2024. Gerald Knox. Gastric bypass revision.”

Silence.

“That’s oddly specific.”

“Do you remember the surgeon?”

“No.”

“Was it Harold Vance?”

Longer silence.

“Marcus, Vance was dead.”

“Exactly.”

“Then no.”

“Who?”

“I’d have to check my notes.”

“Please.”

She called back twelve minutes later.

“I wrote ‘agency surgeon’ on my anesthesia worksheet.”

“Name?”

“No name. Credentialing sticker covered it.”

“What sticker?”

“Emergency privilege sticker. We were using them during the cyber outage.”

Marcus stopped.

I looked at him.

“What cyber outage?”

He covered the phone.

“Hospital ransomware attack. EHR was partially offline for eleven days.”

When systems came back, hundreds of paper records had to be manually reconstructed.

That was plausible.

Dangerously plausible.

Priya continued:

“I remember that week because half the OR board was handwritten.”

“Who reconstructed surgeon records?”

“Credentialing or Health Information Management. I have no idea.”

Marcus thanked her.

Then we checked another operation from the outage.

Different patient.

Surgeon:

Dr. Harold Vance.

Then another.

Vance.

Another.

Vance.

My skin tightened.

“How many?”

Marcus searched the date range.

Seventeen surgeries carried Vance’s electronic signature during the eleven-day outage.

Marcus whispered:

“He had been dead more than a year.”

“Maybe they used his profile as a placeholder.”

“That would be insane.”

“Yes.”

“Not impossible.”

“No.”

We opened the hospital credentialing archive.

Access restricted.

Marcus used his chief credentials.

A PDF appeared.

DOWNTIME SURGICAL COVERAGE — EMERGENCY PRIVILEGES.

Five temporary physicians were listed.

Four names.

One line blacked out by a later administrative correction.

I pointed.

“Who is number five?”

Marcus clicked the revision history.

Access denied.

Then his phone rang.

Chief Medical Officer.

Dr. Elaine Porter.

At 2:31 in the morning.

Marcus answered.

“Elaine?”

I watched his face.

“No, Gerald Knox is stable.”

Pause.

“Yes.”

Another pause.

His expression hardened.

“How did you know what record we were looking at?”

That got my attention.

Marcus put the phone on speaker.

Porter’s voice came through.

“Marcus, stop opening archived downtime records until Legal gets involved.”

He looked at me.

“Why?”

“Because those files were part of a closed compliance review.”

“Why is Harold Vance signing surgeries after his death?”

Silence.

Then:

“It’s complicated.”

“That is not an answer.”

“We discovered legacy-provider attribution errors after the ransomware incident. They were corrected.”

“Gerald’s record wasn’t.”

“We’ll fix it.”

“Who actually operated on him?”

Another silence.

“Marcus, it’s almost three in the morning.”

“My patient nearly lost his bowel tonight because a defect supposedly documented as closed wasn’t closed. I want the surgeon’s name.”

Porter’s voice changed.

Not angry.

Careful.

“You need to step away from this until morning.”

Marcus stared at the screen.

“Why?”

“Because the physician who actually performed Gerald Knox’s revision was never granted final hospital privileges.”

I felt the room become very still.

Marcus asked:

“Then why was he operating?”

Porter did not answer.

Instead she said:

“Call me from your office. Not a shared workstation.”

Then she disconnected.

Marcus looked at me.

I looked at the seventeen operations signed by a dead surgeon.

This was no longer a corrupted template.

Somebody had deliberately placed another surgeon’s name over doctors who were not supposed to be operating there at all.

And Gerald Knox was only one of seventeen patients we knew about.

PART 3

At 2:38 a.m., another trauma alert arrived.

Because hospitals do not care whether administrators are hiding seventeen surgical records.

Three victims from a freeway pileup.

One critical.

One serious.

One walking wounded.

Marcus looked at the screen.

Then at me.

“You available?”

“Yes.”

“You sure?”

“I didn’t drive here for sleep.”

The critical patient was Daniel Price.

Twenty-eight.

Construction foreman.

His pickup had been crushed between a box truck and highway barrier.

Paramedics had placed a pelvic binder.

Blood pressure:

74 over 42.

Heart rate:

FAST ultrasound:

Positive abdominal fluid.

Chest:

Clear enough.

Pelvis unstable.

Multiple sources of bleeding possible.

This was not a case for surgical elegance.

This was damage control.

Marcus and I worked together.

No observer gallery.

No staff staring in amazement.

Real trauma surgery is too busy for admiration.

Daniel reached the OR alive because the emergency team moved well.

Anesthesia activated massive transfusion.

Blood bank had products ready.

Marcus opened the abdomen.

I packed the pelvis.

Bleeding from mesenteric injury.

Small bowel torn.

Spleen damaged but salvageable.

The pelvic bleeding remained diffuse.

Interventional radiology was called for embolization once he stabilized enough for transfer.

We controlled what we could.

Resected the devitalized bowel without reconnecting it immediately.

Temporary abdominal closure.

Then moved him directly to IR.

At 4:31, Daniel’s blood pressure held above ninety.

At 5:12, embolization controlled the major pelvic arterial bleed.

Alive.

Three patients had entered our operating rooms that night at serious risk of dying.

Lauren.

Gerald.

Daniel.

Three were alive.

I did not save them alone.

That mattered.

But by dawn the staff no longer called me “the temp” unless they were discussing scheduling.

Marcus walked into his office at 5:40.

I followed.

Chief Medical Officer Elaine Porter was waiting on video.

So was hospital general counsel.

And a compliance officer named Isaac Green.

Porter looked exhausted.

“Maya, you’re not hospital leadership.”

“No.”

“You are also a witness to the record discrepancy.”

“Yes.”

“So you can remain.”

Generous.

Marcus sat.

“Start with the dead surgeon.”

Porter exhaled.

The ransomware attack had happened twenty-two months earlier.

For eleven days, the hospital’s credentialing, scheduling, medication, and operative-reporting systems were partially unavailable.

Emergency privileges were granted to six outside surgeons to maintain trauma and emergency coverage.

Five were properly processed.

One was not.

Dr. Aaron Kessler.

General surgeon from a private surgical staffing company called NorthBridge Clinical.

Kessler was licensed.

Board-certified.

No active disciplinary action.

But his Harbor Ridge privilege application had stalled because one prior hospital had not returned a required reference.

During the cyberattack, staffing collapsed.

Two permanent surgeons were quarantined with COVID.

Another suffered an injury.

The credentialing committee authorized Kessler verbally under emergency disaster provisions.

“Verbal?” Marcus asked.

“Yes.”

“Who approved?”

Porter hesitated.

“I did.”

There it was.

Not a faceless conspiracy.

A person.

“Was that legal?” I asked.

“Potentially. Disaster privileging can be expedited.”

“Was it documented?”

“Not adequately.”

“What happened afterward?”

Kessler performed nine surgeries over four days.

No obvious catastrophic outcomes.

When the EHR returned, Health Information Management could not finalize his operative notes because he had no active provider profile.

Someone needed to assign an author so records could be closed.

A coding supervisor selected a “downtime supervising surgeon” account.

Harold Vance.

Why Vance?

His provider profile had never been fully deactivated after his death because old teaching records and archived research studies still depended on his identifier.

Someone believed the account was restricted from billing.

It was not.

The first note closed successfully.

Then staff used it again.

And again.

Not only for Kessler.

For emergency notes where surgeon attribution was unclear.

Seventeen operations.

“How did nobody catch a dead doctor billing surgeries?” Marcus asked.

Porter said:

“Billing did.”

“When?”

“Six weeks later.”

“And?”

“That’s where this became worse.”

The hospital faced a problem.

If it corrected the records to Aaron Kessler, insurers could challenge whether services performed before full privileges were reimbursable.

Medicare.

Private insurance.

Hospital liability coverage.

Credentialing exposure.

The obvious correct action was disclose.

Correct.

Rebill.

Possibly repay.

Instead, the hospital hired an outside compliance consultant.

The consultant argued Kessler had been functioning under emergency disaster privileges and therefore the services themselves were valid.

Reasonable legal argument.

But the operative records still needed authorship.

The recommendation was to replace Vance with the “responsible supervising surgeon.”

“Who?” Marcus asked.

Porter looked at him.

“You.”

Marcus’s chair moved backward.

“What?”

“You were assistant chief at the time.”

“I was in Chicago during the first six days of that outage.”

“We know.”

“Then how am I supervising surgeries from Chicago?”

“You signed the blanket emergency coverage plan before leaving.”

“That is not supervision.”

“No.”

“Did you put my name on those charts?”

“We corrected some.”

“Some?”

“Eleven.”

Marcus stood.

“So there are eleven surgeries in this hospital attributed to me that I did not perform?”

“Not exactly.”

His face changed.

“That sentence better improve.”

Porter continued:

“Your name appears in the administrative attestation field, not necessarily primary surgeon.”

“Patients reading the chart know that distinction?”

Probably not.

Neither did insurers unless they audited closely.

Marcus looked at me.

The man who had doubted an agency surgeon twelve hours earlier was learning that his own institution had used his name to legitimize another one.

“What happened to Kessler?” I asked.

Porter answered.

“NorthBridge reassigned him two months later.”

“Why?”

“Unrelated complaint.”

“What complaint?”

“A postoperative complication at another facility.”

Marcus said:

“Patient death?”

“No.”

“Then?”

“Wrong-site incision.”

Silence.

Not wrong operation.

Wrong initial incision location corrected before major harm.

Still serious.

The hospital that employed him suspended privileges.

Harbor Ridge learned about it after Kessler had already left.

That triggered retrospective review.

The review found no wrong-site events here.

No proven major technical failures.

Then lawyers recommended closing the matter after correcting billing.

“Did you notify the seventeen patients?” I asked.

Porter looked away.

“No.”

That was the first answer that actually angered me.

“Why?”

“The compliance consultant said there was no evidence their care was harmed by the attribution error.”

“Gerald Knox’s chart says two mesenteric defects were closed.”

“Yes.”

“One was open tonight.”

“That can recur.”

“Yes.”

“Did anybody review his actual surgery video?”

“No recording existed during downtime.”

“Original paper note?”

“Missing.”

“Then you do not know what Kessler did.”

“No.”

“Yet the patient was told Dr. Vance did it.”

“He was not explicitly told that.”

“It’s in his medical record.”

Silence.

I leaned back.

There is a moment when administrative error becomes something else.

Not necessarily criminal fraud.

Not yet.

But concealment.

When a system knows the record is wrong and chooses not to tell the person whose body the record describes, the problem stops belonging only to billing.

Marcus asked:

“Who decided not to notify?”

Porter said:

“The compliance committee.”

“Names.”

“Marcus.”

“Names.”

General counsel interrupted.

“We’re not doing that in this call.”

Marcus laughed once.

“Then we’re done.”

He stood.

“I’m notifying the CEO and board quality chair.”

Porter said:

“Please wait until Legal—”

“No.”

She leaned forward.

“You were part of the emergency staffing decision.”

“Yes.”

“You signed the coverage framework.”

“Yes.”

“This could expose you too.”

Marcus stopped.

Then said:

“Good.”

That surprised everyone.

“If my name is on something false, expose it.”

He ended the call.

I looked at him.

“You sure?”

“No.”

Good answer.

By 8:00 a.m., an internal patient-safety investigation had formally reopened.

My six-week locum assignment suddenly felt longer.

I went home to the furnished apartment the agency had rented for me.

Slept four hours.

Woke to seventeen missed messages.

One was from Marcus.

Call me.

I did.

“What happened?”

“We found forty-three.”

I sat up.

“Forty-three what?”

“Operations with provider attribution that doesn’t match the actual surgeon.”

“That outage was eleven days.”

“Not all from the outage.”

My stomach tightened.

“How far back?”

“Three years.”

“What does that mean?”

“It means somebody kept using the workaround after the system came back.”

There it was.

The cyberattack had created the excuse.

The practice survived the emergency.

And according to Marcus, at least four of those forty-three surgeries involved complications serious enough to require later reoperation.