Henry Ford Health Notifies 2,000 Patients About Insider Data Breach
An insider data breach has been reported by Henry Ford Health in Michigan, and Wilmington Community Clinic has notified patients about an August cybersecurity incident.
Henry Ford Health, Michigan
Detroit, MI-based Henry Ford Health, one of the leading non-profit academic health systems in the country, has recently reported a data breach to the HHS’ Office for Civil Rights that has affected 1,984 patients. Few details have been released about the data breach, other than that it involved unauthorized access to a desktop computer.
This appears to have been an insider incident, as Henry Ford Health issued a statement confirming that it takes data privacy seriously and has terminated the employee responsible. The nature of the unauthorized access was not disclosed, nor the types of information that may have been accessed. Notification letters have been sent to the affected individuals, who have been offered complimentary credit monitoring services.
Wilmington Community Clinic, California
Wilmington Community Clinic, a community health center in Los Angeles, California, has started notifying patients about a data security incident identified on August 13, 2025. Immediate steps were taken to disconnect all access to the network, and third-party cybersecurity experts were engaged to assist its IT staff with the incident response and to conduct a forensic investigation.
Get The FREE
HIPAA Compliance Checklist
Immediate Delivery of Checklist Link To Your Email Address
Please Enter Correct Email Address
Your Privacy Respected
HIPAA Journal Privacy Policy
The forensic investigation confirmed unauthorized network access, and the data review has recently been completed. On October 13, 2025, Wilmington Community Clinic engaged a third-party mailing vendor to issue notifications to the affected individuals, and the notification process was completed on November 18, 2025. Data potentially compromised in the incident includes names, health insurance identification numbers, medical information, dates of birth, driver’s license numbers/state identification numbers.
Wilmington Community Clinic said it is unaware of any misuse of the exposed data; however, as a precaution, the affected individuals have been offered complimentary credit monitoring and identity theft protection services for 12 months. The data breach has been reported to regulators, but the incident is not yet shown on the HHS’ Office for Civil Rights breach portal, so it is currently unclear how many individuals have been affected.
