MyMichigan Health said on October 15 that it is reviewing a claim by a group calling itself MetaEncryptor that it stole data from the 12-hospital system, but the organization has found no sign that anyone reached its network or lifted patient records.
The crew has not published sample files or any other proof, according to the health system, so the claim stays unverified. MyMichigan, headquartered in Midland, has handed the review to Mandiant and is working with law enforcement. Its medical centers run from Alma and Alpena to Saginaw, Sault Ste. Marie and West Branch.
Neither the statement nor local coverage said how much data MetaEncryptor claims to hold, where the claim was posted, or whether a payment was demanded. The system reported no interruption to patient care and has not sent notices to patients.
A claim without evidence cuts both ways. Some crews inflate or recycle old material to force a payout, and some turn out to be right. That is why the expensive part of the response is the forensic review: an outside firm reads logs and network traffic for signs of entry, and if a breach of protected health information is confirmed, the HIPAA Breach Notification Rule requires notices to affected individuals and to HHS’ Office for Civil Rights.
For providers facing an unproven claim, the practical answer is a documented review that stands up later. Log retention long enough to cover a quiet intrusion matters, as does a written record of what the forensic team examined and when.
Patients should watch for messages that use the announcement as cover. Scammers routinely cite a fresh incident and ask people to confirm personal details, and MyMichigan has announced no patient outreach tied to this claim.
