MCLAREN HEALTH CARE CORPORATION

McLaren Health Care based in Grand Blanc, Michigan, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-05-05 and reported on 2025-06-30. 841 Texas residents were affected. 743,131 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Driver’s License number;Medical Information;Health Insurance Information;Date of Birth. Consumers were notified via Posted at company website or special website;U.S. Mail;Broadcast on Texas-wide Media.

McLaren Health Care reported to HHS on 2025-06-24 a Hacking/IT Incident affecting 743131 individuals. Breached information located on Network Server.

McLaren Health Care notified Vermont AG of a ransomware attack impacting patient networks between July 17 and August 3, 2024. The attack targeted McLaren and Karmanos systems. Data potentially exposed includes names and government identifiers. McLaren engaged forensic investigators, secured the network, and is offering identity theft protection services to affected individuals.

McLaren Health Care notified the NH AG of a ransomware attack. Unauthorized access occurred July 17–Aug 3, 2024. Discovered Aug 5, 2024. Affected 15 NH residents with PII, SSN, driver's license, and PHI. Notification sent June 20, 2025. Credit monitoring offered.

McLaren Health Care reported a data breach to the Indiana Attorney General. The breach occurred on 2024-07-17 and was reported on 2025-06-20. 530 Indiana residents were affected. 743,131 individuals affected in total.

McLaren Health Care reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-06-20. 85 Massachusetts residents were affected.

McLaren Health Care disclosed a cybersecurity attack targeting its computer network between July 17 and August 3, 2024. The breach was discovered on August 5, 2024, and involved unauthorized access by an international ransomware group. Approximately 743,131 individuals were affected, including 25 Maine residents. Compromised data included names, SSNs, driver's license numbers, and medical/health insurance information. McLaren engaged forensic specialists, notified regulators and credit bureaus, and provided 12 months of identity protection services.

MCLAREN HEALTH CARE filed a data-breach notice with the Illinois Attorney General in June 2025 (case 25-06-250). The register records the breach as discovered on August 5, 2024. Personal information types reported: drivers license, medical information, ssn, username password. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

McLaren Health Care experienced unauthorized access to its network between July 28, 2023, and August 23, 2023. The organization became aware of suspicious activity on August 22, 2023. The breach potentially impacted patient information including names, Social Security numbers, health insurance details, dates of birth, and medical records such as diagnoses and treatment information. McLaren engaged third-party forensic specialists, secured its network, and is implementing additional administrative and technical safeguards. Identity theft protection services are being offered to affected individuals.

McLaren Health Care notified Montana residents of a cybersecurity event where unauthorized access occurred between July 28 and August 23, 2023. The breach exposed PHI, SSNs, DOBs, and financial info. Notification sent November 9, 2023. Forensic specialists engaged; credit monitoring offered.

McLaren Health Care reported a data breach affecting 77 Maine residents after an external system breach (hacking) that occurred between July 28, 2023, and August 23, 2023. The breach was discovered on October 10, 2023, and involved the compromise of Social Security numbers. The company began notifying affected individuals on November 9, 2023, and offered 12 months of credit monitoring services.

McLaren Health Care reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-11-09. 352 Massachusetts residents were affected. The report records the breach type as electronic.

McLaren Health Care notified New Hampshire residents on November 9, 2023, regarding a cybersecurity event. Unauthorized access to McLaren's network occurred between July 28 and August 23, 2023. The breach potentially exposed names, Social Security numbers, and protected health information (PHI) of approximately 115 New Hampshire residents. McLaren engaged third-party forensic specialists, notified federal law enforcement, and is providing 12-24 months of credit monitoring and identity theft protection services through IDX to affected individuals.

McLaren Health Care notified the Idaho Attorney General on November 9, 2023, of unauthorized network access occurring between July 28 and August 23, 2023. The incident potentially affected 107 Idaho residents, exposing names, Social Security numbers, and health information. McLaren engaged forensic specialists, notified law enforcement, and provided 12 months of credit monitoring to affected individuals.

McLaren Health Care reported unauthorized network access between July 28 and August 23, 2023. The incident involved the exfiltration of PHI and PII, including SSNs, DOBs, and medical records. The company engaged forensic specialists and is offering credit monitoring services.

McLaren Health Care reported to HHS on 2023-10-20 a Hacking/IT Incident affecting 2,103,881 individuals. Breached information located on Network Server. The cyber-attack compromised PHI including names, addresses, birthdates, SSNs, claims, and treatment information. The entity notified HHS, affected individuals, and the media, and implemented additional administrative and technical safeguards.

DESCRIPTION

/

MCLAREN HEALTH CARE filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-775). The register records the breach as discovered on July 28, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

McLaren Health Care Corporation reported to HHS on 2021-07-16 a Hacking/IT Incident affecting 64600 individuals. Breached information located on Network Server. A business associate experienced a ransomware attack affecting ePHI including names, addresses, DOB, driver's license numbers, SSNs, and clinical information.