The covered entity (CE), McLaren Health Care, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 2,103,881 individuals. The PHI involved included names, addresses, birthdates, Social Security numbers, claims, and other treatment information. The CE notified HHS, affected individuals, and the media. The CE implemented additional administrative and technical safeguards. OCR provided technical assistance to the CE.
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · records_basis: empty to hhs · backfill source
2026-09-25 · records: empty to 2103881 · backfill source
2026-09-25 · disclosed: 2023-11-09 to 2023-10-20 · backfill source
2026-09-25 · summary: empty to The covered entity (CE), McLaren Health Care, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 2,103,881 individuals. The PHI involved included names, addresses, birthdates, Social Secur · backfill source
2026-09-25 · source: empty to https://ago.vermont.gov/document/2023-11-09-mclaren-health-care-data-breach-notice-consumers · backfill source
