#United States #data privacy #Marquette County #HR Incident #Ishpeming, Michigan

Marquette County Medical Care Facility Encounters Data Privacy Incident

On June 23, 2025, the Marquette County Medical Care Facility (MCMCF) announced a serious data privacy incident that impacted certain personal information. The facility is well-aware that data privacy and security are paramount, pledging to address this event with utmost seriousness.

Incident Overview

The situation began on March 3, 2025, when MCMCF identified a serious breach known as a business email compromise. This incident unfolded when the contacts of the facility's Human Resources director began receiving phishing emails originating from her Microsoft Office 365 (O365) account. Upon discovering this alarming breach, MCMCF took swift action to secure their email environment. They terminated all active logins, implemented multi-factor authentication on the compromised account, and initiated a comprehensive internal investigation. To gain further clarity and define the scope of the incident, MCMCF engaged nationally recognized computer forensic experts.

Nature of the Breach

Investigations revealed that the unauthorized access involved sensitive information. Specifically, the potentially exposed data includes individuals' names, social security numbers, dates of birth, protected health information, and bank account details. The breadth of this information raised significant concerns about the potential repercussions for affected individuals.

Response Measures

In response to this incident, MCMCF swiftly implemented immediate improvements across their systems, security protocols, and operational practices. Recognizing the gravity of the situation, they have engaged the expertise of professionals to conduct a thorough review of all existing security measures, ensuring that enhanced protocols are established moving forward. Furthermore, the facility has committed to providing assistance to anyone affected by this unfortunate situation.

What Affected Individuals Should Do

For individuals who may have questions or seek further information, MCMCF has established a dedicated toll-free helpline available at 1-833-998-7185. The helpline operates Monday through Friday from 8:00 AM to 8:00 PM EST.

MCMCF expressed deep regret for any distress or inconvenience that this incident may have caused. In concluding their notice, they emphasized their commitment to strengthen the security infrastructure by implementing threat monitoring systems, managing vulnerabilities proactively, and conducting routine system scans.

This incident serves as a crucial reminder of the importance of data privacy and the need for robust security protocols, especially for organizations responsible for sensitive personal information.