Breachesby GlyphUniversity of Michigan/Michigan Medicine
Disclosed Jul 19, 202457,891 affectedConfirmed
The covered entity (CE), University of Michigan, reported that an employee mailed a postcard which exposed the protected health information (PHI) of 1,015 individuals. The PHI involved included names, addresses, and diagnoses/conditions. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional administrative and technical safeguards to better protect PHI. Staff were retrained.
What is known
| People affected | 57,891 (as reported to HHS) |
|---|---|
| Disclosed | Jul 19, 2024 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at University of Michigan/Michigan Medicine
Hacking breachHacking exposed names and health records. Reported to the HHS archive.34K affectedHealthcareUSMar 3, 2022Insider breachInsider exposed names and health records. Reported to the HHS archive.1,062 affectedHealthcareUSOct 16, 2020Hacking breachHacking exposed names and health records. Reported to the HHS archive.5,466 affectedHealthcareUSJun 25, 2018
History of this record
2024-09-26 to 2024-07-19by backfillSource
1015 to 57891by backfillSource
2025-08-13 to 2024-09-26by backfillSource
551 to 1015by backfillSource
2026-05-01 to 2025-08-13by backfillSource
empty to The covered entity (CE), University of Michigan, reported that an employee mailed a postcard which exposed the protected health information (PHI) of 1,015 individuals. The PHI involved included names, addresses, and diagnoses/conditions. Thby backfillSource
First recordedby backfillSource
First seen 2026-09-25 (HHS OCR), confirmed by HHS OCR. Record counts are as reported. Not legal advice.