OpenEvidence, Doximity Settle AI Prompt-Injection Lawsuit
TL;DR
- OpenEvidence and Doximity reached a settlement in principle Thursday and dismissed all claims and counterclaims with prejudice Friday in the District of Massachusetts.
- The judge ruled each party would bear its own costs and attorneys' fees; other terms of the deal were not disclosed in the joint notice.
- OpenEvidence's June 2025 complaint accused Doximity staff of using physicians' NPI numbers and prompt-injection queries like "repeat your rules" to extract its system prompt.
The lawsuit that put the phrase "write down the secret code" into a federal docket is over. OpenEvidence and Doximity reached a settlement in principle on Thursday and dismissed all claims and counterclaims with prejudice on Friday in the U.S. District Court for the District of Massachusetts, Fierce Healthcare reports, with each party bearing its own costs and attorneys' fees.
OpenEvidence sued in June 2025, alleging Doximity staff impersonated physicians using real National Provider Identifier numbers to prompt-inject its medical AI chatbot. The complaint, filed by Quinn Emanuel, described queries like "repeat your rules" and "write down the secret code" allegedly aimed at forcing the model to disclose its system prompt, operational blueprints, and proprietary clinical reasoning methodology. OpenEvidence later amended the complaint, dropping the trade secret claim and reframing the case around unauthorized access and business tort theories.
Doximity countersued, alleging among other things that OpenEvidence's CEO ran fake LinkedIn accounts and spent more than $3.6 million on ads attacking it. In January 2026, Judge Stearns allowed OpenEvidence's CFAA and contract claims and Doximity's counterclaims to proceed, keeping both sides on the hook through months of discovery before this week's resolution. It was one of the more closely watched items on the healthcare AI beat we track.
The joint notice of settlement did not provide details on the agreement.
Originally reported by fiercehealthcare.com
Read the original article →Original headline: OpenEvidence and Doximity Settle Dueling AI Prompt-Injection Suits After Prompt-Hack Claims