An insider data breach has been reported by Henry Ford Health in Michigan, and Wilmington Community Clinic has notified patients about an August cybersecurity incident.
Henry Ford Health, Michigan
Detroit, MI-based Henry Ford Health, one of the leading non-profit academic health systems in the country, has recently reported a data breach to the HHS’ Office for Civil Rights that has affected 1,984 patients. Few details have been released about the data breach, other than that it involved unauthorized access to a desktop computer.
This appears to have been an insider incident, as Henry Ford Health issued a statement confirming that it takes data privacy seriously and has terminated the employee responsible. The nature of the unauthorized access was not disclosed, nor the types of information that may have been accessed. Notification letters have been sent to the affected individuals, who have been offered complimentary credit monitoring services.
Wilmington Community Clinic, California
Wilmington Community Clinic, a community health center in Los Angeles, California, has started notifying patients about a data security incident identified on August 13, 2025. Immediate steps were taken to disconnect all access to the network, and third-party cybersecurity experts were engaged to assist its IT staff with the incident response and to conduct a forensic investigation.
The forensic investigation confirmed unauthorized network access, and the data review has recently been completed. On October 13, 2025, Wilmington Community Clinic engaged a third-party mailing vendor to issue notifications to the affected individuals, and the notification process was completed on November 18, 2025. Data potentially compromised in the incident includes names, health insurance identification numbers, medical information, dates of birth, driver’s license numbers/state identification numbers…