MCLAREN HEALTH CARE CORPORATION
ent_019e0d174e99223032800745a633dac3
Disclosures
15
State AG · HHS OCR · Leak Site · 10 jurisdictions
Incidents
3
filings grouped by incident
Max affected reported
2,103,881
nationwide · HHS OCR MI
Leak-site claims
2
unverified actor claims
Identity resolution
- Canonical name
- MCLAREN HEALTH CARE CORPORATION
- Normalized
- mclaren health care— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300OY1YHQK68ZQX37
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- mclaren.org
Disclosure history (15)newest first
- ⭐Texas State AGas victim2025-06-30
McLaren Health Care based in Grand Blanc, Michigan, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-05-05 and reported on 2025-06-30. 841 Texas residents were affected. 743,131 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Driver’s License number;Medical Information;Health Insurance Information;Date of Birth. Consumers were notified via Posted at company website or special website;U.S. Mail;Broadcast on Texas-wide Media.
- MIHHS OCRas victim2025-06-24
McLaren Health Care reported to HHS on 2025-06-24 a Hacking/IT Incident affecting 743131 individuals. Breached information located on Network Server.
- 🍁Vermont State AGas victim2025-06-20
McLaren Health Care notified Vermont AG of a ransomware attack impacting patient networks between July 17 and August 3, 2024. The attack targeted McLaren and Karmanos systems. Data potentially exposed includes names and government identifiers. McLaren engaged forensic investigators, secured the network, and is offering identity theft protection services to affected individuals.
- ⛰️New Hampshire State AGas victim2025-06-20
McLaren Health Care notified the NH AG of a ransomware attack. Unauthorized access occurred July 17–Aug 3, 2024. Discovered Aug 5, 2024. Affected 15 NH residents with PII, SSN, driver's license, and PHI. Notification sent June 20, 2025. Credit monitoring offered.
- 🏎️Indiana State AGas victim2025-06-20
McLaren Health Care reported a data breach to the Indiana Attorney General. The breach occurred on 2024-07-17 and was reported on 2025-06-20. 530 Indiana residents were affected. 743,131 individuals affected in total.
- 🦞Maine State AGas victim2025-06-20
McLaren Health Care, a healthcare organization, reported an external system breach (hacking) that affected 743,131 individuals, including 25 Maine residents. The breach occurred on July 17, 2024, and was discovered on August 5, 2024. Notification to affected Maine residents was sent on June 20, 2025. The company is offering 12 months of identity protection services through IDX.
- 🐻California State AGas victim2023-11-09
McLaren Health Care experienced unauthorized access to its network between July 28, 2023, and August 23, 2023. The organization became aware of suspicious activity on August 22, 2023. The breach potentially impacted patient information including names, Social Security numbers, health insurance details, dates of birth, and medical records such as diagnoses and treatment information. McLaren engaged third-party forensic specialists, secured its network, and is implementing additional administrative and technical safeguards. Identity theft protection services are being offered to affected individuals.
- 🦬Montana State AGas victim2023-11-09
McLaren Health Care reported a data breach to the Montana Attorney General. The breach was reported on 2023-11-09. The breach occurred from 7/28/2023 to 8/23/2023. 137 Montana residents were affected.
- 🦞Maine State AGas victim2023-11-09
McLaren Health Care reported a data breach affecting 77 Maine residents after an external system breach (hacking) that occurred between July 28, 2023, and August 23, 2023. The breach was discovered on October 10, 2023, and involved the compromise of Social Security numbers. The company began notifying affected individuals on November 9, 2023, and offered 12 months of credit monitoring services.
- ⛰️New Hampshire State AGas victim2023-11-09
McLaren Health Care notified New Hampshire residents on November 9, 2023, regarding a cybersecurity event. Unauthorized access to McLaren's network occurred between July 28 and August 23, 2023. The breach potentially exposed names, Social Security numbers, and protected health information (PHI) of approximately 115 New Hampshire residents. McLaren engaged third-party forensic specialists, notified federal law enforcement, and is providing 12-24 months of credit monitoring and identity theft protection services through IDX to affected individuals.
- 🥔Idaho State AGas victim2023-11-09
McLaren Health Care notified the Idaho Attorney General on November 9, 2023, of unauthorized network access occurring between July 28 and August 23, 2023. The incident potentially affected 107 Idaho residents, exposing names, Social Security numbers, and health information. McLaren engaged forensic specialists, notified law enforcement, and provided 12 months of credit monitoring to affected individuals.
- 🍁Vermont State AGas victim2023-11-09
McLaren Health Care reported unauthorized network access between July 28 and August 23, 2023. The incident involved the exfiltration of PHI and PII, including SSNs, DOBs, and medical records. The company engaged forensic specialists and is offering credit monitoring services.
- MIHHS OCRas victim2023-10-20
McLaren Health Care reported to HHS on 2023-10-20 a Hacking/IT Incident affecting 2,103,881 individuals. Breached information located on Network Server. The cyber-attack compromised PHI including names, addresses, birthdates, SSNs, claims, and treatment information. The entity notified HHS, affected individuals, and the media, and implemented additional administrative and technical safeguards.
- GLOBALLeak Siteas victim2023-10-04
DESCRIPTION
- GLOBALLeak Siteas victim2023-09-29
/