Lansing Urgent Care Data Breach Exposes SSNs and Medical Info

A ransomware attack has compromised sensitive patient information at Lansing Urgent Care, exposing Social Security numbers and medical records, Claim Depot reported.

The breach involves highly personal data belonging to patients served by the physician-owned provider across the greater Lansing, Michigan area. According to Claim Depot, the incident involves the exposure of full names, addresses, dates of birth, health insurance details, and specific medical information, including diagnoses and prescriptions.

The timeline of the intrusion reveals a gap between the initial theft and when the provider discovered the event.

While a ransomware group known as INC Ransom posted a claim on a dark web site on Aug. 17, 2026, stating it had obtained Lansing Urgent Care data, the company did not discover the incident until Sept. 11, 2026. At that time, the provider identified that certain data had been accessed and exposed by an unknown third party.

The cybersecurity implications of this event center on the involvement of INC Ransom, a group that specifically targets organizations through ransomware tactics. Mason LLP reported that the incident has been associated with claims by this group alleging unauthorized access to certain systems.

Lansing Urgent Care has since launched an investigation into the nature and scope of the activity to confirm its systems are secure. The company is currently conducting a review to identify exactly which individuals are at risk and what specific data belongs to them. This investigation remains ongoing.

The impact is widespread because the provider serves much of Mid-Michigan. Mason LLP noted that Lansing Urgent Care operates eight clinic locations, serving the following areas:

Frandor
Okemos
Westside Lansing
Southside Lansing
DeWitt
Bath/Haslett
Mason
Grand Ledge

The exposure of Social Security numbers alongside medical diagnoses creates a high-stakes scenario for identity theft. Unlike a stolen credit card, which can be canceled, a Social Security number is a permanent identifier that can be used for long-term financial fraud and medical identity theft.

When medical records are compromised, the damage extends beyond finances to personal privacy. The data involved includes treatment, diagnosis, and prescription information, which provides bad actors with a detailed profile of a patient’s physical health.

Mason LLP stated that individuals who received care at these locations, or were previously or currently employed by the company, may have had their protected health information involved. The firm is currently evaluating whether affected individuals may be part of a potential class action lawsuit.

Lansing Urgent Care has encouraged all patients to remain vigilant regarding identity theft and fraud. The company recommends that individuals review their account statements and monitor their free credit reports for any suspicious activity over the next 12 to 24 months.

For those seeking direct answers regarding their personal data, the provider has established a dedicated phone line at 844-573-1119. Patients may also reach the organization via mail at 505 N. Clipper St., Lansing, MI 48912.

Lansing Urgent Care is reviewing compromised files to finalize the list of affected parties.