Michigan Avenue Immediate Care
Disclosed Jun 30, 20224 years ago144,104 affectedConfirmed
Michigan Avenue Immediate Care, the covered entity (CE), reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 144,104 individuals. The PHI involved included names, addresses, telephone numbers, dates of birth, Social Security numbers, drivers’ license numbers, and health insurance and treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its sensitive data. All staff were retrained.
What is known
| People affected | 144,104 (as reported to HHS) |
|---|---|
| Disclosed | Jun 30, 2022 |
| Discovered | May 1, 2022 |
| Happened | Apr 10, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Michigan Avenue Immediate Careoag.ca.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Michigan Avenue Immediate Carejustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Michigan Avenue Immediate Care (Healthcare Provider, IL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jun 30, 2022 | |
| Oregon DOJresidents of OR | Jun 30, 2022 | 144,104 |
| HHS archivetotal | Jun 30, 2022 | 144,104 |
| California AGresidents of CA | Aug 18, 2022 | |
| Oregon DOJresidents of OR | Aug 18, 2022 | 144,104 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 144104 · backfill source
- 2026-09-25 · summary: empty to Michigan Avenue Immediate Care, the covered entity (CE), reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 144,104 individuals. The PHI involved included names, addresses, telephone numbe · backfill source
- 2026-09-25 · discovered: empty to 2022-05-01 · backfill source
- 2026-09-25 · disclosed: 2022-08-18 to 2022-06-30 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.