Thousands of Corewell Health patients affected by security breach

According to Fox2, Corewell Health disclosed that a former health care consulting vendor experienced a data breach in 2024, exposing information for thousands of patients. The vendor, Pinnacle Holdings, previously provided health care consulting services to Corewell Health, and Corewell said it conducted a review after being notified to identify those impacted. The health system reported that around 19,000 patients were affected.

Compromised data included names, contact information, Social Security numbers, medical information, and insurance details. The breach highlights the risks associated with third‑party vendors in the health sector and the potential for large numbers of patients to be affected.