McLaren Health Care, a healthcare organization operating predominantly in the Midwestern United States, experienced a criminal cyberattack. The organization announced the incident on August 7, 2024, and as of then, it has been unable to confirm if patient or employee information was compromised. 

Erich Kron, security awareness advocate at cybersecurity company KnowBe4, commented, “Healthcare organizations continue to get pummeled by bad actors partly because of the value of PHI records and the time sensitive nature of medical work. PHI contains enough information to steal identities, or be used to extort patients. Much of the information provided to medical practitioners could be very embarrassing to patients, and bad actors are aware of this and willing to exploit it.”