Beth Harvey, MD, FAAP – WCAAP Vaccine Committee
The Case of the Vaccine Bandit
It began with a move. In 2019, a busy, vibrant pediatric clinic moved from a well-lit medical complex to a structure across the street that told a different story the moment you saw it. The new clinic had three entrances, two of them around the back and one on the side, tucked into shadows, adjacent to a low-income apartment complex and a row of offices that emptied out each evening to a dark, desolate parking lot.
The people who worked there grew used to it. They exited through the side door most evenings. It had a glitchy lock, but was the door closest to where they parked and felt safer in this dicey location. The staff were more focused on the parking lot than the unlatched door and stopped making sure to hear the click as it locked.
The security system, meanwhile, was aging. It alarmed too often, triggered by nothing, and the staff stopped listening and became annoyed. At some point — no one could say exactly when — they stopped setting the alarm altogether. The building sat dark and unmonitored each night, its side door perhaps latched, perhaps not.
On a weeknight in November 2023, someone entered the clinic. It is not known with certainty which door they used, though investigators believe the side entrance, with its faulty lock, was the most likely point of entry.
What followed was not the work of a professional. The clinic was ransacked . They took food. They took coolers including the kind used for vaccine transport. They took a pair of prescription eyeglasses belonging to a staff member. They threw around supplies as if splattered from a propeller and grabbed some vaccines on the way out.
In the weeks following the breach, the clinic moved with the urgency. The security system was repaired and is now set without exception each evening. Two vulnerable doors were rebuilt — not patched, but structurally rebuilt — with reinforced frames and key-entry locks that cannot be coaxed open by a jiggle and a moment alone in the dark.
Both the Helmer refrigerator and the new Helmer freezer (which replaced the unsecured unit) are locked every night. The keys are removed and stored. These required safety protocols are now habit and are reinforced and required.
The financial loss to the VFC program is quantifiable: $11,264.91 in vaccine at CDC cost. What is harder to quantify is the loss to a clinic that had, for years, maintained exceptionally low waste rates — a record built on diligence and care, undone in a single dark November night by vulnerabilities that had been visible all along.
In true crime, we often search for the extraordinary: the mastermind, the elaborate scheme, the motive wrapped in mystery. But this case is a study in the ordinary — the drip of small compromises, each one reasonable in isolation, until together they constitute an open door.
A lock that jammed too often. An alarm that cried wolf. A key hanging unused beside a fridge that no one thought to secure because nothing had ever happened before. Nothing had ever happened before. Until it did.
Suggestions: Imagine a break in at your clinic, are your vaccines secure? Are your staff alert and careful with entry and exit? How would you notice if vaccines were missing if a kid or parent or staff member grabbed a lot from your refrigerator on the way out of your clinic?