Corewell health's 19,000 patients exposed in 2024 data breach

Corewell Health, a Michigan-based healthcare system, has disclosed a data breach impacting approximately 19,000 patients. The incident occurred in November 2024, when a consulting firm previously working with Corewell, Pinnacle Holdings, LTD, experienced a network disruption.

Exposure of sensitive patient data

During its investigation, Pinnacle Holdings discovered that unauthorized individuals may have acquired sensitive information including patients' names, phone numbers, social security numbers, driver's license details, dates of birth, Health insurance information, prescription data, and dates of service.

Corewell Health only recently learned of the breach and promptly launched a comprehensive review to identify the affected individuals. The Health system has since notified those impacted, offering free credit monitoring and identity protection services.

While Pinnacle Holdings is unaware of any fraudulent activity stemming from the incident, Corewell Health has implemented additional safeguards to prevent similar breaches in the future.