Traverse City Organizations Hit By Major Data Breaches

Munson Healthcare, Hagerty, and others face cybersecurity incidents exposing patient and customer data

Published on Feb. 8, 2026

Got story updates? Submit your updates here. ›

Several prominent Traverse City organizations, including Munson Healthcare and insurance company Hagerty, have recently experienced major data breaches that compromised sensitive personal information of patients and customers. The incidents have prompted calls for stronger data breach notification laws in Michigan to better protect consumers.

Why it matters

These data breaches highlight the growing cybersecurity threats facing organizations of all sizes, and the need for robust security measures and transparency to protect consumer privacy. The incidents also underscore the importance of state-level legislation to mandate prompt disclosure of data breaches to authorities and affected individuals.

The details

Munson Healthcare recently informed 120,000 patients that their data may have been compromised in a breach involving one of its third-party vendors, Cerner (now owned by Oracle Health). Michigan Attorney General Dana Nessel criticized the year-long delay between the breach and patient notification. Separately, insurance company Hagerty paid $1.3 million to settle a lawsuit with the New York Attorney General's office after a hacking campaign exposed the personal information of around 66,000 New Yorkers.

  • The Cerner breach at Munson Healthcare occurred in January 2025, but patients were not notified until 2026.
  • In 2024, a ransomware attack on Traverse City Area Public Schools forced the district to cancel classes for two days.
  • Just a few months after the TCAPS attack, the City of Traverse City and Grand Traverse County suffered a similar ransomware attack.
  • Hagerty dealt with its data breach in 2025, which was part of a broader hacking campaign targeting car insurance companies' online quoting tools.

The players

Munson Healthcare

A healthcare system serving northern Michigan, including Traverse City.

Cerner Corporation

A healthcare technology company that provides electronic health record (EHR) systems used by Munson Healthcare. Cerner was recently acquired by Oracle Health.

Dana Nessel

The Attorney General of Michigan, who has called for stronger data breach notification laws in the state.

Hagerty

Traverse City's largest private employer, an insurance company that was the target of a data breach affecting around 66,000 New Yorkers.

Letitia James

The Attorney General of New York, who announced a $14.2 million settlement with several car insurance companies, including Hagerty, over data breaches.

Got photos? Submit your photos here. ›

What they’re saying

“Because Michigan law does not currently require companies to immediately notify my office when a data breach occurs, we often don't know who was impacted or when until well after a concerning cyber incident. These delays put consumers at higher risk of identity theft, and our state needs stronger laws to better protect Michiganders from bad actors.”

— Dana Nessel, Attorney General of Michigan (traverseticker.com)

“First and foremost, we are sorry for any inconvenience this Cerner incident has caused; however, data security is a top priority for Munson. We use leading-edge technologies and highly trained staff to keep patient data safe, and we will continue to do so. Our team works to thwart these attacks every day, including working closely with our vendors.”

— Megan Brown, Chief Marketing and Communications Officer, Munson Healthcare (traverseticker.com)

“Protecting our members' data is a top priority at Hagerty, and we continually invest in systems and safeguards to keep confidential information secure.”

— Andy Heller, Spokesperson, Hagerty (traverseticker.com)

What’s next

The Michigan legislature is currently considering a bill package that would 'enhance protections against data breaches and identity theft,' including by requiring prompt disclosure to the attorney general's office.

The takeaway

These data breaches in Traverse City underscore the growing cybersecurity threats facing organizations of all sizes and the need for stronger state-level legislation to mandate prompt disclosure of breaches and better protect consumer privacy.