A ransomware attack in July and August 2024 affected McLaren Health Care and Karmanos Cancer Institute, leading to a data breach involving 743,131 individuals' information.
The hackers stole personal data like Social Security numbers, health insurance details, driver's license information, names, and medical data.
Suspicious activity was initially detected on August 5, 2024, and after a nine-month review, the breach was publicly disclosed in May 2025.
McLaren suffered system downtime, resulting in cancellations and rescheduling of surgeries, appointments, and treatments during the breach.
The breach led to the manual handling of appointments and medication information by staff.
McLaren confirmed the breach was due to a ransomware attack by an international group after initially omitting this information.
This is not the first ransomware incident for McLaren, with a prior attack in July 2023 affecting 2.2 million individuals.
Despite no evidence of misuse, affected individuals are offered free credit monitoring for a year and advised to remain vigilant for any suspicious activities on their accounts.