University of Michigan Health Plan reported to HHS on 2026-02-26 an Unauthorized Access/Disclosure affecting 2,315 individuals. A workforce member inadvertently sent PHI — including names, dates of birth, and treatment information — to an unauthorized individual via email. The CE notified HHS and affected individuals. OCR provided technical assistance regarding the HIPAA Rules. Breached information located on Email. Business associate: not present.
Affected (this filing): 2,315