Corewell health breach exposes data of 19,000 patients

Michigan-based Corewell Health is grappling with a significant data breach impacting approximately 19,000 patients. The incident, disclosed Friday, stems from a network disruption experienced by Pinnacle Holdings, LTD, a healthcare consulting firm that previously worked with the Health system.

Pinnacle holdings reports unauthorized data access

The Colorado-based firm confirmed the disruption on November 25, 2024, stating that an investigation revealed unauthorized access to information. Corewell Health was notified of the breach recently and immediately initiated a comprehensive review to identify affected individuals.

The compromised data may include sensitive information such as names, phone numbers, Social Security numbers, driver's license numbers, dates of birth, Health insurance details, prescription information, and dates of service. The nonprofitHealth system has sent notification letters to those affected, providing details about the breach and offering free credit monitoring and identity protection services.

While Corewell Health reports no evidence of fraudulent activity at this time, the breach underscores the persistent vulnerability of healthcare systems to cyberattacks. The incident raises serious questions about data security protocols and the risks associated with third-party vendor access.

“The speed with which these breaches are occurring is alarming,” says data security analyst Sarah Chen. “Healthcare data is a goldmine for criminals, and even a brief window of vulnerability can have devastating consequences for patients.”

Pinnacle Holdings encourages impacted individuals to contact them at 866-686-2607 for more information.