McLaren Health Care, based in Grand Blanc, MI, experienced a ransomware attack on September 5, 2023 that affected its billing and electronic health records at most of its fifteen hospitals. The ransomware group Alphv/Blackcat has claimed responsibility for the attack, claiming to have stolen 6 terabytes of sensitive data pertaining to 2.5 million McLaren patients. The Michigan Attorney General made a public announcement about the attack on October 6, 2023.
Lawsuits have been filed in October by plaintiffs (Cheryl Drugich, Kati Komorosky, Jamie McSkulin) alleging negligence, negligence per se, breach of fiduciary duty, breach of implied contract, unjust enrichment, and violations of the Michigan Consumer Protection Act and Michigan data breach notification law. They are seeking declaratory relief, monetary damages, statutory damages, punitive damages, equitable relief, and injunctive relief.