"McLaren Health Care Says Data Breach Impacted 2.2 Million People"

McLaren Health Care (McLaren) is notifying nearly 2.2 million people of a data breach that occurred between late July and August this year, exposing sensitive personal information.  McLaren is a non-profit healthcare system with an annual revenue of $6.6 billion.  McLaren has an extensive network across Michigan that includes 14 hospitals with a total bed capacity of 2,624 and is supported by a team of 490 physicians.  According to McLaren, it identified a security breach on August 22, 2023.  Subsequent investigations, conducted with the assistance of external cybersecurity experts, revealed that the breach had compromised its systems since July 28, 2023.  Evidence shows that on August 31, an unauthorized threat actor had accessed data.  The following data types were confirmed to have been exposed by October 10: full name, Social Security number (SSN), health insurance information, date of birth, billing or claims information, diagnosis, physician information, medical record number, medicare/medicaid information, prescription/medication information, and diagnostic results and treatment information.  McLaren noted that the specific types of data exposed differ for each individual, depending on the information they shared and the services they received.

BleepingComputer reports: "McLaren Health Care Says Data Breach Impacted 2.2 Million People"