Michigan Medicine reports second data breach of the year, 58K patients exposed
Take action: Spamming MFA prompts is a thing - an attacker that has guessed your password will repeat attempts to request MFA access from you. If you are using a mobile app where you need to just click yes, it's very easy not to pay attention and click yes. Especially during the night, when the prompt wakes you up. If you receive unexpected MFA requests, don't accept and immediately reset your password.
Learn More
Michigan Medicine reports that on July 30, 2024 they have experienced a cyberattack that compromised an employee’s email account, leading to the potential exposure of sensitive patient information.
The breach occurred when the employee accepted an unsolicited multifactor authentication prompt, allowing the attacker access to the account's contents.
The compromised account contained emails and attachments related to patient care, and the investigation confirmed that data for 57,891 individuals was potentially exposed.
The exposed data included:
- Names
- Medical record numbers
- Diagnostic and treatment information
The investigation was conducted from August 21-29, 2024, and notices were sent to affected individuals starting on September 26, 2024.
