Media Contact: Mary Masson - Michigan Medicine 734-764-2220; (c) 734-846-8558

Michigan Medicine notifies patients of email information breach

Patient email addresses were visible to others in event invite sent to over 1000 people

ANN ARBOR, Mich. — Michigan Medicine is notifying 1062 patients about an email that may have exposed their email addresses and health information to others.

Emails containing information about an Inflammatory Bowel Disease event were sent to patients in late September without the blind copy function being used to hide email addresses, so patients’ email addresses were visible to all recipients.

The patient information involved is limited, as the email only included an email address and an invitation for the event. The data did not contain addresses, phone numbers, Social Security numbers, credit card, debit card or bank account numbers so the risk of identity theft occurring is extremely low.

General medical records were not in the information that was emailed.

As soon as Michigan Medicine learned of the error, no additional emails were sent.  Separate emails were sent to explain the error, and included a request that the recipients delete the prior email.

Affected patients were mailed letters Oct. 16 notifying them of the breach.

“Patient privacy is extremely important to us, and we take this matter very seriously. Michigan Medicine took steps immediately to investigate this matter and is implementing additional safeguards to reduce risk to our patients and help prevent recurrence,” said Jeanne Strickland, Michigan Medicine chief compliance officer.  

To prevent future errors like this, the department involved will be adopting different processes for sending emails to patients.  

Michigan Medicine officials believe the risk of identity theft is low because of the limited information involved. However, it is always recommended to monitor patient insurance statements for any transactions related to care or services that have not actually been received. Patients were sent a list of suggested steps to protect against identity theft.

Affected Michigan Medicine patients are expected to receive letters in the mail notifying them of this incident within the next few days. Patients who have concerns or questions may call the University of Michigan IBD Program at 734-647-2964 between 8 a.m. and 5 p.m. or email debratan@med.umich.edu.
About Michigan Medicine: At Michigan Medicine, we advance health to serve Michigan and the world. We pursue excellence every day in our three hospitals, 125 clinics and home care operations that handle more than 2.3 million outpatient visits a year, as well as educate the next generation of physicians, health professionals and scientists in our U-M Medical School.

Michigan Medicine includes the top ranked U-M Medical School and the University of Michigan Health System, which includes the C.S. Mott Children’s Hospital, Von Voigtlander Women’s Hospital, University Hospital, the Frankel Cardiovascular Center and the Rogel Cancer Center. Michigan Medicine’s adult hospitals were ranked no. 11 in the nation by U.S. News and World Report in 2020-21 and C.S. Mott Children’s Hospital was the only children’s hospital in Michigan nationally ranked in all 10 pediatric specialties analyzed by U.S. News and World Report for 2020-21. The U-M Medical School is one of the nation's biomedical research powerhouses, with total research funding of more than $500 million.

NOTICE: Except where otherwise noted, all articles are published under a Creative Commons Attribution 3.0 license. You are free to copy, distribute, adapt, transmit, or make commercial use of this work as long as you attribute Michigan Medicine as the original creator and include a link to this article.

Media Inquiries:  734-764-2220 8 a.m.-5 p.m. ET 

734-936-4000 after hours, weekends, and holidays (ask for the PR person on call) MichMedmedia@med.umich.edu for embargoed news, videos & more