MHF Community Board
Notifications
Clear all

Munson Experiences Major Data Breach

2 Posts
1 Users
0 Reactions
252 Views
10x25mm
(@10x25mm)
Famed Member
Joined: 3 years ago
Posts: 1397
Topic starter  

Munson Healthcare, based in Traverse City, has announced that the personal data of about 100,000 of their patients have been breached at an electronic health records provider.  Munson sent letters this month to the affected patients, offering free services for two years to protect the patients' identities.

Munson refers to the responsible electronic health records provider as Cerner, but that firm was bought by Oracle Corporation at the end of 2021 and is now known as Oracle Health.  Oracle is a huge technology company based in Austin, Texas.  Oracle Health is based in Kansas City, Missouri.  It is somewhat surprising that a major IT company like Oracle cannot defend their electronic data files.

The Munson alert:

https://www.munsonhealthcare.org/about-the-system/cerner-incident

ELECTRONIC HEALTH RECORD DATA BREACH

Munson Healthcare has learned that an unauthorized third party gained access to and obtained data that was maintained by an electronic health record (EHR) vendor, Cerner. The vendor has determined through an investigation that at least as early as January 22, 2025, an unauthorized third party gained access to personal health information on legacy Cerner systems that Munson Healthcare utilizes. The personal information involved in this incident may have included a patient’s name, Social Security number, and information included within patient medical records, such as medical record numbers, doctors, diagnoses, medicines, test results, images, care and treatment. We began investigating the incident as soon as we learned of it. Cerner, our vendor, took steps to secure the system, and engaged with law enforcement and cybersecurity specialists to ensure our patients’ safety and security.

WHAT YOU CAN DO. To help protect your identity, we, along with the vendor, are offering two complimentary services. First, you have access to Experian IdentityWorksSM Credit Plus 3B which provides credit monitoring for 24 months. Taking advantage of the fraud detection tools, as well as the credit monitoring offering available through ExperianIdentityWorksSM requires patients to enroll in the service. Second, patients have access to Identity Restoration for 24 months and this does not require any action on your part at this time. The Terms and Conditions for this offer are located at www.ExperianIDWorks.com/restoration. See Appendix for additional details, including regarding enrollment in IdentityWorksSM.

FOR MORE INFORMATION. If you have further questions or concerns, or would like an alternative to enrolling online, please call 833-931-5700 toll-free Monday through Friday from 8 am – 8 pm Central (excluding major U.S. holidays). Please be prepared to provide your engagement number, B158037.

We apologize for any inconvenience this causes, and please know we are working with our vendors, taking every step possible in the future to keep your data safe.



   
ReplyQuote
10x25mm
(@10x25mm)
Famed Member
Joined: 3 years ago
Posts: 1397
Topic starter  

Michigan Attorney General Dana Nessel is on it:

https://www.wilx.com/2026/01/23/ag-nessel-reissues-data-breach-alert-following-munson-healthcare-cyber-incident/

AG Nessel reissues consumer alert following Munson Healthcare data breach
By Jade Chaparro - January 23, 2026

LANSING, Mich. (WILX) - Michigan Attorney General Dana Nessel is reminding residents to stay alert about data breaches after a cyber incident in 2025 exposed patient information at Munson Healthcare.

The breach happened when an unauthorized person gained access through Cerner, a third-party company that manages electronic health records.

Personal information was compromised, including patient names, Social Security numbers and details from medical records. Those records may contain medical record numbers, doctors’ names, diagnoses, medications, test results, images and information about care and treatment.

The Department of Attorney General does not yet know how many Michigan residents were affected. Munson Healthcare is notifying impacted patients by mail.

Nessel is pushing for changes to state law that would require companies to immediately report data breaches to her office. She said faster notification would allow the state to warn the public sooner.

“Because Michigan law does not currently require companies to immediately notify my office when a data breach occurs, we often don’t know who was impacted or when until well after a concerning cyber incident,” Nessel said. “These delays put consumers at higher risk of identity theft, and our state needs stronger laws to better protect Michiganders from bad actors. I urge anyone who receives a notice that their personal information may have been compromised to consider taking advantage of the free credit monitoring resources being offered.”

Nessel said consumers can take steps to protect themselves after a data breach, including watching for phishing emails, changing or strengthening passwords, deleting unnecessary files, using multifactor authentication and regularly reviewing their credit reports.

Consumers can get free weekly credit reports from Equifax, Experian and TransUnion through the Annual Credit Report website.

She also encourages people to consider placing a freeze on their credit, especially when Social Security numbers are involved.

Nessel also wants consumers to understand the importance of protecting medical information.

People affected by a data breach should watch for unexpected medical bills, errors in insurance explanation of benefits statements, calls from debt collectors about bills they do not owe, unfamiliar medical debt on their credit reports, notices that insurance benefits have been used up, or denial of coverage for conditions they do not have.

To help residents, Nessel has launched the Michigan Identity Theft Support System, which assists people working to restore their identities after theft.



   
ReplyQuote
Q

Get MHF Insights

News and tips for your healthcare freedom.

We never spam you. One-step unsubscribe.

 

Name(Required)
Zip Code(Required)
This field is hidden when viewing the form

Sponsors

Friends of MHF

MHF Community Forum thumbnail

Kirsten DeVries

Tom & Karen Nunheimer

Steve Ahonen

Ron & Faith Bosserman

Marlin & Kathy Klumpp

Sign Up for MHF Insights to keep up on the latest in Michigan Health Policy

Name(Required)
Zip Code(Required)
This field is hidden when viewing the form

5 great non profit logos 2021 - 2025
Michigan Healthcare Freedom Candid

Click here to join the MHF Community Forum!

Grow the community on our social media pages.

Social media & sharing icons powered by UltimatelySocial