University of Michigan Health Plan
Disclosed Feb 26, 20262,315 affectedConfirmed
The covered entity (CE), University of Michigan Health Plan, reported that a workforce member inadvertently sent the protected health information (PHI) of approximately 2,315 individuals to an unauthorized individual. The PHI involved names, dates of birth, and treatment information. The CE notified HHS and the affected individuals. OCR provided technical assistance regarding the HIPAA Rules.
What is known
| People affected | 2,315 (as reported to HHS) |
|---|---|
| Disclosed | Feb 26, 2026 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
First recordedby backfillSource
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.