Marquette County Medical Care Facility Hit by Business Email Compromise in March 2025 In March 2025, Marquette County Medical Care Facility (MCMCF), a 140-bed healthcare provider in Michigan, disclosed a business email compromise (BEC) incident affecting its Human Resources director’s Microsoft Office 365 account. The breach was detected on March 3, 2025, after contacts began receiving phishing emails from the compromised account. The exposed data may have included names, Social Security numbers, dates of birth, protected health information (PHI), and bank details, though it remains unclear whether the incident impacted only employees or also extended to patient records. MCMCF operates a long-term care and rehabilitation facility, including a specialized unit for individuals with dementia. While the facility’s press release did not mention free mitigation services for affected individuals, it established a dedicated helpline (1-833-998-7185) for inquiries, available Monday through Friday from 8:00 a.m. to 8:00 p.m. EST. The full scope of the breach and its impact on operations have not been detailed.