University of Michigan/Michigan Medicine

The covered entity (CE), University of Michigan/Michigan Medicine, reported that it experienced a hacking/IT incident that affected the protected health information (PHI) of 57,891 individuals. The PHI involved included names and diagnoses/conditions. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE changed passwords and strengthened password requirements, implemented new technical safeguards, revised its policies and procedures, sanctioned workforce members, and trained or retrained workforce members.