University of Michigan Health Plan
Disclosed Feb 26, 20267 months ago2,315 affectedConfirmed
The covered entity (CE), University of Michigan Health Plan, reported that a workforce member inadvertently sent the protected health information (PHI) of approximately 2,315 individuals to an unauthorized individual. The PHI involved names, dates of birth, and treatment information. The CE notified HHS and the affected individuals. OCR provided technical assistance regarding the HIPAA Rules.
What is known
| People affected | 2,315 (as reported to HHS) |
|---|---|
| Disclosed | Feb 26, 2026 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): University of Michigan Health Plan (Health Plan, MI)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Feb 26 | 2,315 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.