Hacker Group Claims Data Theft From MyMichigan Health, but the System Has Found No Evidence of a Breach

Ice Water, Math Quizzes, and Shocks: The 1948 Breastfeeding Experiment That Showed Stress Can Slow Milk FlowIn 1948, researchers stressed a nursing mother with ice water, toe pulling, and math problems with shocks. Each time, her baby got less milk. Thanksgiving 2026 Almanac Outlook Calls for Upper Midwest Snow and Eastern Rain as Travelers Plan AheadThe Old Farmer’s Almanac predicts snow in the Upper Midwest and rain in the East for Thanksgiving 2026. Here is how to plan travel safely and stay healthy. Cervical Cancer Screening Gaps Persist in the South and West as At-Home HPV Testing Expands for WomenA new study shows uneven cervical cancer screening across U.S. regions. Here are current Pap and HPV schedules and at-home testing options. Families with Children of Different Citizenship Status Can Check Each Child’s Eligibility for Medicaid or CHIP SeparatelyA JAMA Network Open study finds that over 1 million U.S. children live in families with mixed citizenship status. Learn how Medicaid and CHIP eligibility is decided for each child. Mental Health Women with Autoimmune Diseases Were Nearly 50% More Likely Than Men to Report Being Given a Psychiatric MisdiagnosisWomen with autoimmune diseases were nearly 50% more likely than men to report a psychiatric misdiagnosis in a 6,607-person survey. What to know. National Depression Screening Advice Was Linked to More Therapy and Less Antidepressant-Only Use Among Distressed AdultsAfter depression screening became routine advice, distressed adults used more therapy and fewer antidepressants alone. What patients can ask. After Bend Elementary School Shooting, Oregon Officials Urge Families to Watch Children for Signs of Trauma and GriefAfter the Bend school shooting, Oregon officials urge families to check in with kids. Trauma signs by age and where to find help. Teens and Young Adults with Depression Had Four Times the Odds of a Prescription Drug Use DisorderYouths with depression had 4 times the odds of a prescription drug use disorder in a national survey. What parents should know about the findings. Innovation FDA-Approved Brytly Becomes First Over-the-Counter Apraclonidine Eye Drop, Limited to Twice Daily with Contact Lens PrecautionsFDA approved Brytly, the first OTC apraclonidine drop for eye redness. Use it twice daily at most and see a doctor for eye pain or vision changes. A Vine Famous for Copying Plastic Leaves Showed No Mimicry in a Two-Year Greenhouse RetestA vine said to mimic plastic leaves showed no host-driven mimicry in a new preprint. Its leaves changed shape on their own, often by season. The Side Facing Up Before a Coin Flip Wins Slightly More Often, and One Flipper Hit 60%In 350,757 coin flips, coins landed on their starting side 50.8% of the time. The bias depended on the person, and one flipper hit 60%. Cockroach Milk Packs 3 Times the Energy of Dairy, and Its Ig Nobel Crystals Now Inspire Protein DesignCockroach milk crystals hold over 3 times the energy of dairy milk by weight. The 2016 discovery won a 2026 Ig Nobel, but it was never tested as food. Healthy Living Berkeley Springs Boil Water Advisory Now Covers Most Town Customers as Health Officials Check Affected RestaurantsMost Berkeley Springs Water Works customers remain under a boil water advisory. What it means for drinking, cooking, brushing teeth, and restaurants. Buried Cotton Underwear Exposed Lawns as the Sleepiest Soil, While Some Gardens Were Badly OverfedSwiss volunteers buried 2,000 pairs of cotton underwear. Lawns broke them down the least, and some gardens held far more phosphorus than plants need. Houston Pharmacy Behind Recalled Compounded Tirzepatide Vials Drew 14 FDA Inspection Observations, Including Exposed Skin and Research-Grade IngredientsFDA inspectors cited 14 sterility and manufacturing concerns at Houston RX, the maker of recalled compounded tirzepatide. What GLP-1 users should check. Medicare Advantage Members Who Rely on Wrong Doctor Listings Would Owe Only In-Network Costs Under CMS ProposalA CMS proposal would cap costs at in-network rates for Medicare Advantage members misled by wrong doctor listings. It would start in 2028, so verify now. Covid – 19 FDA Proposes Requiring Companies to Report Food Additives That Now Reach Grocery Shelves Without Federal ReviewFDA has released its proposed GRAS rule requiring companies to notify the agency about food additives. Here is what the proposal does and does not do. Federal Regulators Warn Some Hair Dryer Brushes Lack the Part That Stops ElectrocutionCPSC warns hair dryer brushes sold on Walmart.com and TikTok Shop lack immersion protection. The seller has not agreed to a recall or refund. A Recalled Teething Toy Broke the Pattern Parents Were Told to Look ForA newly recalled pull-string teething toy has a different model number and design from earlier recalls, and one choking incident has been reported. Trying to Lower Blood Sugar, Cholesterol or Blood Pressure? Different Workouts Suited Different MarkersA pooled analysis of 53 trials found that different exercise types helped different metabolic markers. Most of the evidence was low certainty. LUCAS BARIOULET | AFP via Getty Images Share on Twitter Share on Facebook Share on Pocket MyMichigan Health said Oct. 15 that it is investigating a hacker group’s claim that it stole data from the Michigan health system, but so far it has found no evidence that its systems were accessed or patient information was compromised. The claim came from a group calling itself MetaEncryptor, according to the health system’s statement.

The group has not provided supporting evidence, including sample files, MyMichigan Health said, so the claim remains unverified. The system has brought in the independent cybersecurity incident response firm Mandiant and is working with law enforcement to evaluate the claims.

For patients, the situation is uncertain rather than alarming. No breach has been confirmed, and the system has not announced any patient notifications.

MyMichigan Health is based in Midland and operates 12 medical centers, including locations in Alma, Alpena, Clare, Gladwin, Midland, Mt. Pleasant, Saginaw, Sault Ste. Marie, Standish, Tawas, and West Branch, according to its list of medical centers.

“Protecting the privacy and security of our patients, employees and communities remains a top priority,” said Dr. Pankaj Jandwani, the system’s vice president and chief information officer, Becker’s Hospital Review reported. In the system’s statement, he added, “We take these allegations seriously and will continue to work with our cybersecurity specialists.”

The investigation is ongoing, and the system said it will continue to evaluate any credible new information. Neither the statement nor Becker’s described how much data the group claims to have, where the claim was posted, or whether it included a ransom demand. The statement did not mention any disruption to patient care.

The statement also did not say when the system first learned of the claim or how long the review might take. Forensic investigations of possible intrusions can take weeks, and organizations often release findings in stages.

Criminal groups sometimes announce attacks they cannot prove. Some exaggerate to pressure a target into paying, and some claims later turn out to be false or recycled from older incidents. Others are later confirmed.

That is why the details of the response matter. An outside forensic firm can review system logs and network traffic to look for signs of intrusion. If a breach of protected health information is confirmed, the federal HIPAA Breach Notification Rule generally requires the organization to notify affected individuals and the U.S. Department of Health and Human Services.

Until then, patients should be cautious about scams that use the news as cover. Fraudsters often send emails, texts, or calls that mention a recent incident and ask people to confirm personal details or click a link. MyMichigan Health has not announced any patient outreach about this claim.

Health records can be especially valuable to criminals because they can combine names, birth dates, insurance numbers, and sometimes Social Security numbers. Unlike a credit card, that information cannot simply be canceled and reissued, which is why medical identity theft can take a long time to untangle.

If a breach were confirmed, the people at risk would depend on what data was involved. Patients, employees, and family members listed as emergency contacts or insurance policyholders can all appear in health system records.

Older adults are frequent targets of scams involving Medicare bills or benefits, and caregivers who manage a parent’s medical accounts may want to watch those accounts as well. Employees may also want to monitor payroll and tax accounts, since workforce records can include direct deposit and tax details.

No data has been confirmed as stolen, so there is no evidence that any of these groups is currently at risk from this specific claim.

Patients do not need to take emergency action based on an unverified claim. A few routine steps can still reduce risk at little cost.

Review explanation-of-benefits statements from your insurer or Medicare for visits, tests, or equipment you did not receive, and report anything unfamiliar to the insurer. Use a strong, unique password for patient portal accounts, and turn on two-step verification if it is offered.

Do not respond to unsolicited messages asking for personal or insurance information, even if they mention MyMichigan Health. Contact the health system directly using a phone number from its website or a past bill. If a breach is ever confirmed, a legitimate notice will typically explain what data was involved and what services, such as credit monitoring, are being offered.

You can check your credit reports for free and place a free credit freeze with Equifax, Experian, and TransUnion. Parents can also request a free credit freeze for a child. If you see signs of identity theft, the Federal Trade Commission’s IdentityTheft.gov offers a step-by-step recovery plan.

Continue scheduled appointments and prescriptions as usual. MedicalDaily will update this story if the system confirms or rules out unauthorized access, or begins notifying patients.

What happened at MyMichigan Health? A group calling itself MetaEncryptor claimed it stole data. The health system said Oct. 15 that it is investigating but has found no evidence of a breach.

Has patient data been confirmed stolen? No. The system said it has found no compromise of patient information, and the group has not provided sample files.

Who is investigating? MyMichigan Health brought in the cybersecurity firm Mandiant and is working with law enforcement.

Is patient care affected? The health system’s statement did not mention any disruption. Patients should keep appointments as scheduled.

Should patients freeze their credit? It is not required based on current information, but a free credit freeze is a low-cost precaution some patients may choose.

How can I avoid related scams? Do not share personal information through unsolicited messages. Contact MyMichigan Health directly using a number from its website.