Corewell Health Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating Corewell Health, formerly known as Beaumont, regarding its recent data breach. The Corewell Health data breach involved personal identifiable information and protected health information belonging to approximately 1 million individuals.


Corewell Health is a not-for-profit health system based in Michigan. Founded in 2014, Corewell Health provides health care and coverage with an exceptional team of 65,000+ dedicated people—including more than 12,000 physicians and advanced practice providers and more than 15,500 nurses providing care and services in 21 hospitals, 300+ outpatient locations and several post-acute facilities—and Priority Health, a provider-sponsored health plan serving more than 1.3 million members.2 Today, Corewell Health offers a wide range of healthcare services, including primary care, behavioral health, cancer care, children’s health, heart and vascular care, neurosciences, orthopedics, and woman’s health. Corewell Health is headquartered in Grand Rapids, Michigan.


In November 2023, Corewell Health was informed that its vendor, Welltok, Inc., had experienced a data breach in which personal identifiable information and protected health information may have been accessed and acquired. Through its investigation, Welltok determined that an unauthorized party may have accessed this sensitive information through a vulnerability in the MOVEit Transfer file sharing software, which Welltok utilized, between May 30, 2023, and June 1, 2023. As a result, Welltok began notifying individuals whose information may have been impacted. The type of information potentially exposed includes:

  • Name
  • Social Security number
  • Address
  • Contact information
  • Health insurance information 
  • Health information

If you received a breach notification letter from Welltok, Inc. or Corewell Health:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or

If you were impacted by the Corewell Health data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by Corewell Health:
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: