2026 Central Ohio Primary Care Physicians (COPC) — voice-phishing intrusion; SSNs and health data of about 1.4 million patients and employees may be exposed
Data compromised
Names, addresses, Social Security numbers, financial information and limited patient health information for about 1.4 million people, including patients and employees, according to COPC. Notices include 709 Massachusetts residents. COPC says it is not aware of any misuse for identity theft or fraud.
Technical writeup
COPC confirmed on October 15, 2026 that the personal information of about 1.4 million patients and employees may have been exposed; notifications began October 16. The 1.4 million total is the figure COPC reported. Attribution to Chaos comes from local reporting and is unconfirmed. companyConfirmed true.
Root cause
A criminal reached files containing protected health information after a voice-phishing call. COPC found the incident on August 25, 2026, and says it was limited to its direct systems; the MyChart patient portal was not affected. Local reporting names the Chaos ransomware group; COPC has not confirmed that.