British Influencer Reports Targeted HIPAA Breach at Michigan Hospital British social media influencer Josh Cauldwell-Clarke revealed on February 11 that his electronic health records were improperly accessed by employees at a Michigan hospital during his visit last month. The breach occurred on January 18 or 19, when staff viewed his personal data including his name, date of birth, address, phone number, account details, and clinical information without a legitimate work-related reason. Cauldwell-Clarke, known for his viral travel content with fellow influencer Jason Riley as the duo Josh & Jase, clarified in a follow-up post on February 12 that the incident was not a mass data breach but a targeted violation. He expressed discomfort over strangers possessing his private medical and personal details and confirmed he had sought legal counsel. The influencer had been hospitalized in northern Michigan for an unspecified injury, receiving pain medication during his stay. He recounted hospital staff requesting selfies while he was under treatment and the facility removing his name from a public notice board to maintain discretion. Under the Health Insurance Portability and Accountability Act (HIPAA), unauthorized access to medical records by employees is a violation, and hospitals are required to notify affected individuals. It remains unclear whether the Michigan hospital has taken disciplinary or corrective action in this case. Cauldwell-Clarke and Riley’s Michigan trip, which included visits to the Mackinac Bridge, Mackinac Island, and Lake Superior, gained widespread attention for their travel vlogs and local experiences.

MidMichigan Medical Center-Alpena suffered from a data breach incident that exposed 1,900 patients personal data. The compromised information includes patient names, addresses, social-security numbers and clinical data. The medical institution also sent patients advice on how to protect themselves from identity theft in addition to warning them about the potential breach of personal data.