Michigan-based healthcare provider McLaren Health Care is notifying more than 743,000 people that their personal data was compromised in a data breach that occurred in 2024.
See also: Is the Interlock ransomware group behind the attack on Kettering Health?
According to the organization, the incident was detected on August 5, 2024, when suspicious activity was observed on computer systems associated with McLaren and the Karmanos Cancer Institute.
In a written notice to affected individuals, a copy of which was filed with the Maine Attorney General's Office, McLaren revealed that ransomware-type malware was used in the attack.
Hackers accessed McLaren Health Care's network between July 17 and August 3 and obtained several files containing sensitive data, such as personally identifiable information (PII) and protected health information (PHI).
The potentially compromised data includes, according to the organization, names, social security numbers, driver's license numbers, health insurance details and medical information.
See also: Kettering Health: Cyberattack behind outage
McLaren Health Care informed the Maine Attorney General's Office that 743,131 people were affected by the data breach and that it is providing them with free credit monitoring services for 12 months, as well as guidance on how to protect themselves from fraud and identity theft.
The healthcare provider did not reveal who was behind the attack, and no known ransomware group to claim responsibility.
This is the second ransomware data breach McLaren Health Care has disclosed in the past two years. McLaren Health Care, based in Grand Blanc, Michigan, is a fully integrated healthcare delivery system that includes 15 hospitals. In 2013, it signed an agreement with the Karmanos Cancer Institute, creating the largest cancer research and care network in the state.
See also: 480,000 Catholic Health patients affected by Serviceaide data breach
The McLaren Health Care data breach highlights a growing problem in the healthcare sector: the vulnerability of critical infrastructure to ransomware attacks. Healthcare providers handle vast amounts of sensitive personal and medical data, making them attractive targets for cybercriminals.
Source: securityweek
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
