Breachesby GlyphMcLaren Health Care
Disclosed Oct 20, 20232,103,881 affectedConfirmed
The covered entity (CE), McLaren Health Care, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 2,103,881 individuals. The PHI involved included names, addresses, birthdates, Social Security numbers, claims, and other treatment information. The CE notified HHS, affected individuals, and the media. The CE implemented additional administrative and technical safeguards. OCR provided technical assistance to the CE.
What is known
| People affected | 2,103,881 (as reported to HHS) |
|---|---|
| Disclosed | Oct 20, 2023 |
| Happened | Jul 28, 2023 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at McLaren Health Care
INC ransomware attack on McLaren exposed data of 743,131 patientsRansomware exposed names, health records, Social Security numbers, insurance details and dates of birth. Reported to the HHS OCR.Ransomware743K affectedHealthcareUSJun 20, 2025Hacking breachHacking exposed names and health records. Reported to the HHS archive.65K affectedHealthcareUSJul 16, 2021
History of this record
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 2103881by backfillSource
2023-11-09 to 2023-10-20by backfillSource
empty to The covered entity (CE), McLaren Health Care, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 2,103,881 individuals. The PHI involved included names, addresses, birthdates, Social Securby backfillSource
empty to https://ago.vermont.gov/document/2023-11-09-mclaren-health-care-data-breach-notice-consumersby backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.