McLaren Health Care Data Breach

‍

McLaren Health Care Data Breach Affects 743,000 Patients — What You Need to Know

At Pittman, Dutton, Hellums, Bradley & Mann, P.C., we are actively investigating a massive data breach affecting approximately 743,000 patients of McLaren Health Care, a nonprofit health system headquartered in Michigan. The breach, which was caused by a ransomware attack, raises serious concerns about the exposure of sensitive personal and medical data—and the delay in notifying affected individuals.

‍

What Happened in this Data Breach?

According to McLaren Health Care, the organization was the victim of a ransomware attack by an international cybercriminal group. The breach impacted systems belonging to both McLaren Health Care and the Karmanos Cancer Institute. Hackers maintained unauthorized access to the network between July 17 and August 3, 2024.

‍

While the breach was discovered on August 5, 2024, forensic investigations to determine the scope of the damage were not completed until May 5, 2025—nearly nine months later. Only then did McLaren begin notifying patients.

‍

Who Is McLaren Health Care?

McLaren is a major healthcare provider with 14 hospitals across Michigan and over 28,000 employees, along with a network of more than 113,000 contracted providers. With an annual revenue of $6.6 billion, McLaren is responsible for safeguarding the personal health information of hundreds of thousands of patients in Michigan and beyond.

‍

What Information Was Compromised?

While McLaren’s official notice confirms that full names were exposed, the full extent of the data breach remains unclear. It is possible that Social Security numbers, medical records, insurance information, or other sensitive personal identifiers were also accessed by the attackers. This is not McLaren's first data breach. In 2023, the healthcare system was hit by a separate ransomware attack linked to the ALPHV/BlackCat group. That incident compromised the personal and medical information of 2.2 million people, and samples of the stolen data were leaked online.

‍

What Should You Do If You Received a Notification?

If McLaren Health Care notified you that your data was compromised, it is critical to act quickly:

• Monitor your credit and medical records for suspicious activity
• Place fraud alerts or a credit freeze with the three major credit bureaus
• Keep records of all correspondence from McLaren
• Speak with a data breach attorney to understand your legal rights

‍

How Our Law Firm Can Help

At Pittman, Dutton, Hellums, Bradley & Mann, P.C., we represent individuals affected by healthcare data breaches and corporate negligence. If your information was compromised in the McLaren Health Care data breach, you may be eligible for compensation related to:

• Identity theft protection services
• Out-of-pocket expenses
• Emotional distress
• The risk of future misuse of your private information

We offer free, confidential consultations and you pay nothing unless we recover compensation for you.

Call (205) 322-8880 or fill out our online form today to schedule your case review. Your trust in your healthcare provider should never be compromised—we’re here to help protect your rights.

‍

Links

[1] https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/79a56f34-ffbe-4621-a74c-9b1e49477904.html

[2] https://www.bleepingcomputer.com/news/security/mclaren-health-care-says-data-breach-impacts-743-000-patients/

‍