Incident BriefingsCentral Ohio Primary Care vishing incident

Central Ohio Primary Care vishing incident

Central Ohio Primary Care Physicians, Inc. discovered unauthorized access to sensitive patient files on August 25, 2026.

Last modified

Summary

  • Environment: Files containing protected health information
  • Operational impact: Sensitive patient files accessed; affected systems taken offline
  • Financial impact: No incident cost disclosed
  • Record status: Developing record. Reviewed November 4, 2026; updated as evidence emerges.

What happened

Central Ohio Primary Care Physicians, Inc. discovered unauthorized access to sensitive patient files on August 25, 2026. [1]

Impact

Potentially exposed information included names, addresses, Social Security numbers, patient identifiers, limited health data and financial information. COPC said MyChart was not breached and remained available. [1]

Timeline

  1. Cybersecurity incident discovered

    Cybersecurity incident discovered, according to the published account. Incident notice.

    [1]

  2. Patient notification letter dated

    Patient notification letter dated, according to the published account. Incident notice.

    [1]

  3. Briefing updated

    This briefing was last reviewed and updated on November 4, 2026.

Threat Group & Attack Vector

COPC attributed entry to voice phishing, also called vishing, a social-engineering attack conducted by voice. [1]

Actors

  • No threat actor group has been identified in the reviewed public evidence.

TTPs

Response

COPC took affected systems offline, engaged cybersecurity and legal specialists, worked with law enforcement and offered identity protection. It reported no known misuse at notification. [1]