Institutional self-protection

Institutional self-protection is the recurring pattern by which hospitals and related authorities in the book contain suspected patient harm within organizational channels rather than promptly exposing it to police, regulators, or the public. It is not presented as one uniform conspiracy: the institutions’ knowledge and intentions differ, and the narrative sometimes leaves them uncertain. What links the episodes is the repeated preference for internal review, controlled disclosure, and protection from institutional consequences even as patients, families, and employees bear the uncertainty and danger.

Internal Review and the Limits of Proof

At Saint Barnabas Medical Center, investigators Thomas Arnold and Joe Barry believed they had the elements of a serious criminal case: suspected homicides on at least two units, physical evidence of intravenous tampering with deadly doses, and a strong suspect among the staff. Yet when they presented the matter to Livingston police chief Don Jones, he declined to take it on and recommended that the hospital handle it internally. Arnold and Barry could not yet prove the case themselves, but Jones’s refusal left the unresolved problem with the hospital rather than transferring it to an outside investigation.

The hospital’s internal effort was substantial but inconclusive. Arnold and Barry installed stop-motion cameras in the medication-storage room, interviewed physicians, staff, and families, and imposed a stricter sign-out procedure for insulin. In October, two more patients in the coronary care unit suffered unexplained hypoglycemia and were connected to insulin-tainted intravenous bags. The investigators had growing suspicions but still lacked proof. Then Charles Cullen left, and the insulin spikes stopped. The sequence shows both the value and the limitation of internal controls: the hospital tightened access and watched for misconduct, yet the measures did not establish responsibility before the suspected nurse moved on.

Personnel Decisions Without Public Accountability

The death of Francis Henry at Liberty Nursing and Rehabilitation Center exposes the gap between discovering evidence of poisoning and pursuing a criminal inquiry. Henry, an elderly resident with a broken vertebra, suffered violent seizures and a coma after Cullen injected insulin into his intravenous line. The hospital’s investigation found massive foreign-insulin levels in his blood, although insulin was absent from his chart and no staff administration was recorded. Because Henry was immobilized, investigators considered self-administration extremely unlikely; suspicion fell on the night shift.

Liberty fired senior nurse Kimberly Pepe instead. Pepe’s wrongful-termination suit alleged that a supervisor had questioned her about the death while, in effect, focusing on Cullen, and suggested that Liberty suspected him. The company denied her accusations and denied having suspicions about Cullen; the suit was settled out of court, with the settlement amount and nondisclosure agreement sealed. The book does not establish why Pepe was selected or what Liberty knew. It does establish that a patient had been poisoned, that an employee challenged the hospital’s handling, and that there was no criminal investigation. Cullen was moved from the intensive care unit to the psychiatric wing and, five months after Henry’s death, fired for failing to follow drug protocol—not prosecuted for the poisoning. He soon found nursing work elsewhere.

At Saint Luke’s Hospital, the response to evidence of missing drugs was more explicitly organized around institutional risk. After dangerous heart drugs went missing and large quantities of a paralyzing agent were activated and disappeared, risk managers Janice Rader and Ken Vail consulted in-house counsel Sy Traub, who brought in a law firm specializing in criminal law and malpractice defense. They considered what would be best for the hospital while Cullen was due to return to work. When another cache was found during his shift, the lawyer questioned him about the drugs and the shifts on which they had disappeared. Cullen resigned under an arrangement that provided neutral references and kept the incident off his employment record. He understood the arrangement as a way for the institution to remove him without public exposure; his interpretation is part of the narrative, not proof of the hospital’s full motive.

Saint Luke’s later maintained that its investigation, chart reviews, and inquiries had found no suspicious deaths connected to the missing drugs or other actions by Cullen. At the same time, administrators and the hospital’s lawyer contacted colleagues at local hospitals to warn them that Cullen should not be rehired. Those warnings did not go to the public, police, or the State Nursing Board, and Somerset Medical Center was not on the call list. Thus, information was shared selectively: enough to affect employment decisions among some local institutions, but not broadly enough to alert every hospital that might employ him or the authorities able to investigate.

Delayed Escalation at Somerset

When Reverend Florian Gall died at Somerset Medical Center with digoxin levels far above normal, the administration recognized that the death was not natural and that Gall was not the first suspected case. The response began internally: pharmacy was asked to review Pyxis activity around the digoxin deaths, and assistant pharmacist Nancy Doherty contacted the New Jersey Poison Control Center to establish how much of the drug could produce Gall’s blood levels. The hospital sought help with the calculation, while retaining control of the wider inquiry.

Bruce Ruck of Poison Control warned his director, Steven Marcus, that the data were unambiguous and that patients might remain at risk while Somerset delayed acknowledging the facts. But the expected callback did not come. When Ruck called again, pharmacy chief Stuart Vigdor told him that administration had taken over the investigation. The shift in control did not itself resolve the question of responsibility; it marked how information and authority were being managed inside the hospital while an outside agency pressed for a response.

The consequences of such decisions reached beyond administrators and investigators. Lucille Gall, an experienced nurse who had kept vigil at her brother’s bedside, had understood his earlier improvement and had rescinded his do-not-resuscitate status. After his sudden death, she learned that his blood contained elevated digoxin and that Somerset had recorded the death as natural without performing an autopsy. She recognized what the drug levels meant and concluded that someone had killed him. Her anger was sharpened by the fact that she had spent long days at the hospital and could have understood the significance of the results had she been told. The family’s loss was compounded by exclusion from information that might have changed how Gall’s death was investigated.

The Burden on Staff and the Cost of Silence

Internal control also shaped what employees could know. At Somerset, a new insulin adjustment form required nurses to sign electronically for their estimate of the amount remaining in an insulin vial. Amy Loughren objected that the estimate was unreliable and refused to sign. Management did not explain why insulin was suddenly being treated with greater control. Amy inferred that something serious might have happened on her unit, perhaps to one of her patients, but was left to question the change without being given its reason.

As police interviews began, suspicion spread among the nurses. Amy was known both as Cullen’s friend and as someone who had resisted the insulin procedure; colleagues avoided her, and she feared for her job, her license, and her own possible involvement. When detective Danny Baldwin showed her Cullen’s Pyxis record from the night Gall died, the document made it possible for her to imagine that her friend had done something terrible. It did not make reconciling that evidence with her friendship easy. Her position illustrates a secondary cost of restricted information: staff are left to interpret unexplained procedures and rumors, while those asked to help investigators risk professional isolation and betrayal of personal trust. Amy weighed whether the detectives might be wrong or manipulating her and whether cooperation would endanger her work and relationship with Cullen. Later, she brought paperwork to the investigators and helped them obtain records, feeling exposed and alone even as their work made her somewhat braver.

The consequences extended into family life, too. In November 1992, Adrianne Cullen secretly consulted a lawyer because she feared that what had happened to Queenie might happen to her children. With gallbladder surgery scheduled at Warren Hospital, where Cullen worked, she insisted on having divorce papers documenting her intentions before entering what she regarded as his hospital. The book does not establish that the hospital posed a danger to her; it presents her fear and the secrecy surrounding her decision as consequences of living with Cullen and of the distrust that surrounded his work.

Legal Aftermath and Institutional Meaning

After the criminal proceedings, families of victims and potential victims sued the hospitals where Cullen had worked. The New Jersey suits were settled out of court, and both case files and settlements remained sealed. No hospital administrator faced criminal proceedings. The record therefore combines evidence of institutional responses and disputed knowledge with important limits: confidential settlements and denials do not establish a single explanation for every decision, and the book does not claim that every institution knew the same facts.

The New Jersey State Legislature responded with reporting measures. The 2004 Patient Safety Act increased hospitals’ responsibility to report serious preventable adverse events to the Department of Health and Senior Services. The following year, the Enhancement Act required reports to the Division of Consumer Affairs, including the Board of Nursing, of certain limited facts about health-care professionals and required hospitals to keep records of patient-care complaints and disciplinary actions for seven years. Thirty-five other states adopted the measures. Yet the laws carried a significant limitation: a compliant hospital would not be liable for civil actions arising from its reports, but the legislation imposed no penalty or civil liability for failing to comply. The reforms addressed reporting, while leaving a gap between an institutional duty to disclose and a consequence for not doing so.

Across these episodes, self-protection is visible less as a single declared policy than as a chain of choices: keep an inquiry internal, offer a neutral reference, share a warning selectively, withhold an explanation, or allow a settlement to remain sealed. The pattern matters because hospitals control access to patients, medication records, and the first interpretation of unusual deaths. When that control is used to manage institutional exposure rather than to ensure prompt outside scrutiny, families lose information, staff must navigate suspicion without context, and a nurse suspected of poisoning can move between workplaces before a complete warning reaches every relevant authority.