GRAND RAPIDS, MI - About one million Corewell Health patients in southeast Michigan may have had their personal and medical information exposed in yet another nationwide data breach.
Michigan Attorney General Dana Nessel on Tuesday, Dec. 26, announced the second data breach of a vendor used by Corewell Health.
It comes less than a month after a data breach of another Corewell Health vendor that also is believed to have exposed similar personal and medical information of about one million patients serviced by the health system in southeast Michigan.
In this latest breach, the compromised vendor, HealthEC, mailed letters on Dec. 22 to those impacted, Nessel said.
Some of the following information may have been garnered by hackers: names, addresses, Social Security numbers, dates of birth, diagnoses, mental/physical conditions, prescription information, patient account numbers, health insurance information, treatment cost information, provider names and more.
Corewell formerly operated as Spectrum Health but changed its name to Corewell after it merged with Beaumont Health in 2022.
Corewell Health contacted Nessel's office about the most recent breach ahead of its public announcement about it.
State law currently doesn't require that notification, and Nessel said her department often learns about data breaches through the media.
Nessel wants state lawmakers to require companies to report data breaches to her office.
Nessel said this latest breach also impacted a smaller number of people through Beaumont ACO, which also uses HealthEC. HealthEC provides services identifying high-risk patients and barriers to care and closing gaps in care.
To those impacted, HealthEC is offering 12 months of credit monitoring and identity protection services through TransUnion.
Information on how to enroll will be mailed directly to potentially impacted patients.
The first data breach of about 1 million Corewell Health patients in southeast Michigan was announced Dec. 1.
About 2,500 Priority Health members were also impacted by that breach.
The breach occurred through Welltok Inc., which provides patient-communication services for Corewell Health on the southeast side of the state as well as a Priority Health healthy lifestyle portal for the health system's health plan.
If you purchase a product or register for an account through a link on our site, we may receive compensation.
This Cyber News was published on www.mlive.com. Publication date: Tue, 26 Dec 2023 22:14:04 +0000