Regents of the University of Michigan

The University of Michigan reported that it experienced a ransomware incident that affected the protected health information (PHI) of 61,033 individuals. The breach was reported to HHS on October 23, 2023. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, government-issued identification numbers, claims and financial information, diagnoses and conditions, medications, and other treatment information. The breach occurred on a network server. In response, the University offered free credit monitoring and identity protection services, implemented additional security safeguards, and retrained staff.

Affected (this filing): 61,033