Michigan Medicine announced Thursday that it has been hit for the second time in four months by a cyberattack that targeted employee email accounts and compromised protected health information, such as the names, medical record numbers and diagnostic and/or treatment information of nearly 58,000 people. "A Michigan Medicine employee accepted an unsolicited multifactor authentication prompt, which allowed the cyberattacker to access the employee's email account and its contents," the Ann Abor-based health system said in a statement. Michigan Medicine is the academic medical center of the University of Michigan and includes the U-M Medical School and University of Michigan Health. "The event occurred on July 30, 2024. The account was disabled as soon as possible so no further access could take place."
