Aspire Rural Health System, a Michigan-based healthcare provider serving over 70 locations across four counties, suffered a ransomware attack by the BianLian group between November 4, 2024, and January 6, 2025. The breach exposed sensitive data of 138,386 individuals, including full names, Social Security numbers, financial details (account/routing numbers, payment cards, PINs), medical records (diagnoses, prescriptions, lab results), biometric identifiers, driver’s licenses, passports, and usernames/passwords. The attack disrupted systems, causing a technical outage on January 6, 2025, with partial restoration the following day. BianLian claimed responsibility, asserting theft of patient records, though Aspire neither confirmed the group’s involvement nor disclosed ransom demands/payments. Affected individuals—particularly those with compromised Social Security numbers—were offered free credit monitoring. This incident ranks as BianLian’s sixth-largest healthcare breach, aligning with their pattern of targeting healthcare for data encryption and exfiltration. The prolonged investigation (until July 18, 2025) underscores the attack’s complexity and the high-risk nature of exposed health and financial data, which could enable identity theft, fraud, or further cyber exploitation.