University of Michigan Health‑West published a nuanced May 2026 notice describing how impostors weaponized plausible-but-fraudulent clinician credentials inside the national health-information exchange mesh that pipes encounters out of Epic. Although the denominators tally just 119 patients, the modality’s systemic risk resonates well beyond southwest Michigan campuses.
Epic contemporaneously amplified civil litigation accusing Health Gorilla‑adjacent personas for synthetic clinics; UM Health-West steered victims toward insurance EOB vigilance absent SSN spillage, reflecting the narrower field-level slice confirmed by chart audits.
Canonical record: UM Health-West 2026 HIE misuse on BreachHistory.
Source: UM Health-West official notice