Michigan Medicine notified approximately 5,500 patients about a phishing email campaign that have exposed some of their health information.
During the campaign, emails containing a malicious link were sent to over 3,200 Michigan Medicine employees.
This email was opened by three employees, giving the attacker access to their email accounts.
The compromised information includes names, medical record numbers, addresses, dates of birth, diagnostic and treatment information, and health insurance information.
As soon as Michigan Medicine learned that the email accounts were compromised, they were disabled so no further access could take place until the passwords were changed.
"id": "MIC4393423",
"linkid": "michigan-medicine",
"type": "Data Leak",
"date": "08/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"