MI · HHS OCR reports
HIPAA breaches in Michigan
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Michigan.
Reports
241
Individuals affected
16,131,814
Under investigation
26
Top type: Hacking/IT Incident
State breach notification law
Mich. Comp. Laws §§ 445.61-445.79d (Identity Theft Protection Act) (Identity Theft Protection Act) (amended 2018)
Timing: Without unreasonable delay Michigan requires businesses and persons to notify affected individuals
Read the Michigan data breach notification law summaryAll reports, newest first
Page 4 of 5. 241 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| City of Detroit Health Department | Healthcare Provider | 1,945 | Apr 27, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Ascension Eastwood Clinics | Healthcare Provider | 999 | Apr 23, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Beaumont Health | Healthcare Provider | 112,211 | Apr 17, 2020 | Hacking/IT Incident | Archive (closed) |
| Munson Healthcare | Healthcare Provider | 75,202 | Feb 26, 2020 | Hacking/IT Incident | Archive (closed) |
| Mercy Health Physician Partners | Healthcare Provider | 2,487 | Feb 10, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Beaumont Health | Healthcare Provider | 1,182 | Jan 24, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| North Ottawa Community Health System | Healthcare Provider | 4,013 | Dec 16, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Upper Peninsula Health Plan | Health Plan | 812 | Nov 25, 2019 | Hacking/IT Incident | Archive (closed) |
| Ascension Borgess Hospital | Healthcare Provider | 996 | Nov 14, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Paragon Health, P.C. | Healthcare Provider | 4,674 | Sep 16, 2019 | Hacking/IT Incident | Archive (closed) |
| Cristo Rey Community Center - Family Health Center | Healthcare Provider | 1,500 | Sep 10, 2019 | Hacking/IT Incident | Archive (closed) |
| University of Michigan/Michigan Medicine | Healthcare Provider | 5,466 | Aug 16, 2019 | Hacking/IT Incident | Archive (closed) |
| Northwood, Inc. | Business Associate | 3,881 | Jul 16, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Northwood, Inc. | Business Associate | 583 | Jul 16, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Northwood, Inc | Business Associate | 5,563 | Jul 15, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Northwood, Inc. | Business Associate | 5,000 | Jul 12, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Henry Ford Health System | Healthcare Provider | 1,404 | Jun 19, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Mercy Health Saint Mary's | Healthcare Provider | 976 | May 24, 2019 | Hacking/IT Incident | Archive (closed) |
| Spectrum Health Lakeland | Healthcare Provider | 1,100 | May 6, 2019 | Hacking/IT Incident | Archive (closed) |
| David E. Beneson, DPM | Healthcare Provider | 12,542 | Mar 29, 2019 | Hacking/IT Incident | Archive (closed) |
| Henry Ford Health System | Healthcare Provider | 5,590 | Feb 20, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| Youssef M Aoun DPM PLLC | Healthcare Provider | 700 | Jan 24, 2019 | Theft | Archive (closed) |
| Sacred Heart Rehabilitation Center | Healthcare Provider | 2,266 | Jan 10, 2019 | Hacking/IT Incident | Archive (closed) |
| Wolverine Solutions Group | Business Associate | 1,024,731 | Dec 28, 2018 | Hacking/IT Incident | Archive (closed) |
| Kent County Community Mental Health Authority | Healthcare Provider | 2,284 | Dec 21, 2018 | Hacking/IT Incident | Archive (closed) |
| University of Michigan/Michigan Medicine | Healthcare Provider | 3,624 | Sep 28, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| InterAct of Michigan, Inc. | Healthcare Provider | 1,290 | Aug 7, 2018 | Hacking/IT Incident | Archive (closed) |
| Health Alliance Plan | Health Plan | 2,814 | Jul 5, 2018 | Hacking/IT Incident | Archive (closed) |
| University of Michigan/Michigan Medicine | Healthcare Provider | 871 | Jun 25, 2018 | Theft | Archive (closed) |
| InfuSystem, Inc. | Healthcare Provider | 3,882 | Jun 22, 2018 | Hacking/IT Incident | Archive (closed) |
| Benefit Outsourcing Solutions | Business Associate | 1,144 | Jun 7, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Holland Eye Surgery and Laser Center | Healthcare Provider | 42,200 | May 18, 2018 | Hacking/IT Incident | Archive (closed) |
| Henry Ford Health System | Healthcare Provider | 1,658 | Apr 10, 2018 | Loss | Archive (closed) |
| City of Detroit | Healthcare Provider | 544 | Feb 5, 2018 | Loss | Archive (closed) |
| MidMichigan Medical Center-Alpena | Healthcare Provider | 1,900 | Dec 19, 2017 | Loss | Archive (closed) |
| Bronson Healthcare Group | Healthcare Provider | 8,256 | Dec 5, 2017 | Hacking/IT Incident | Archive (closed) |
| Eclectic Chiropractic Rehab | Healthcare Provider | 650 | Dec 5, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Henry Ford Health System | Healthcare Provider | 43,563 | Dec 1, 2017 | Hacking/IT Incident | Archive (closed) |
| McLaren Medical Group, Mid-Michigan Physicians Imaging Center | Healthcare Provider | 106,008 | Aug 24, 2017 | Hacking/IT Incident | Archive (closed) |
| Spectrum Health System | Healthcare Provider | 902 | Aug 3, 2017 | Theft | Archive (closed) |
| Detroit Medical Center | Healthcare Provider | 1,529 | Jul 13, 2017 | Theft | Archive (closed) |
| Henry Ford Health System | Healthcare Provider | 596 | Jun 26, 2017 | Theft | Archive (closed) |
| Airway Oxygen, Inc. | Healthcare Provider | 500,000 | Jun 16, 2017 | Hacking/IT Incident | Archive (closed) |
| Michigan Facial Aesthetic Surgeons d/b/a University Physician Group | Healthcare Provider | 3,467 | Apr 28, 2017 | Theft | Archive (closed) |
| Area Agency of Aging 1-B | Healthcare Provider | 1,741 | Apr 13, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Area Agency of Aging 1-B | Healthcare Provider | 1,741 | Apr 13, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Memorial Healthcare | Healthcare Provider | 685 | Apr 3, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Covenant Medical Center, Inc. | Healthcare Provider | 6,197 | Jan 20, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Singh and Arora Oncology Hematology, P.C. | Healthcare Provider | 22,000 | Oct 21, 2016 | Hacking/IT Incident | Archive (closed) |
| McLaren Greater Lansing Cardiovascular Group | Healthcare Provider | 1,000 | Sep 21, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.