---
title: "Central Ohio Primary Care vishing incident"
description: "Central Ohio Primary Care Physicians, Inc. discovered unauthorized access to sensitive patient files on August 25, 2026."
incident_type: "Cybersecurity incident"
status: "active"
last_modified: "2026-11-04"
canonical_url: "https://www.ally.security/incidents/central-ohio-primary-care-vishing-incident-2026"
markdown_url: "https://www.ally.security/incidents/central-ohio-primary-care-vishing-incident-2026.md"
stix_url: "https://www.ally.security/incidents/central-ohio-primary-care-vishing-incident-2026/stix.json"
---

# Central Ohio Primary Care vishing incident

Central Ohio Primary Care Physicians, Inc. discovered unauthorized access to sensitive patient files on August 25, 2026.

Last modified Nov 4, 2026 · 1 source

## Summary

- **Environment:** Files containing protected health information
- **Operational impact:** Sensitive patient files accessed; affected systems taken offline
- **Financial impact:** No incident cost disclosed

## What happened

[Central Ohio Primary Care Physicians, Inc.](https://www.copcp.com/) discovered unauthorized access to sensitive patient files on August 25, 2026. [1](#source-1)

## Impact

Potentially exposed information included names, addresses, Social Security numbers, patient identifiers, limited health data and financial information. COPC said MyChart was not breached and remained available. [1](#source-1)

## Timeline

### August 25, 2026 — Cybersecurity incident discovered

Cybersecurity incident discovered, according to the published account. [Incident notice](https://oag.ca.gov/system/files/Central%20Ohio%20Primary%20Care-%20HIPAA%20Breach%20Notification%20INDIVIDUAL%20TEMPLATE%20%28ADULT%29%20v2__Static_Proof_R3%20%281%29.pdf). [1](#source-1)

### October 16, 2026 — Patient notification letter dated

Patient notification letter dated, according to the published account. [Incident notice](https://oag.ca.gov/system/files/Central%20Ohio%20Primary%20Care-%20HIPAA%20Breach%20Notification%20INDIVIDUAL%20TEMPLATE%20%28ADULT%29%20v2__Static_Proof_R3%20%281%29.pdf). [1](#source-1)

### November 4, 2026 — Briefing updated

This briefing was last reviewed and updated on November 4, 2026.

## Threat Group & Attack Vector

COPC attributed entry to voice phishing, also called vishing, a social-engineering attack conducted by voice. [1](#source-1)

### Actors

- No threat actor group has been identified in the reviewed public evidence.

### TTPs

- T1566.004 — [Spearphishing Voice](https://attack.mitre.org/techniques/T1566/004/). [1](#source-1)

## Response

COPC took affected systems offline, engaged cybersecurity and legal specialists, worked with law enforcement and offered identity protection. It reported no known misuse at notification. [1](#source-1)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/central-ohio-primary-care-vishing-incident-2026/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### Central Ohio Primary Care Physicians, Inc. data security notice

official · Central Ohio Primary Care Physicians, Inc. · Oct 16, 2026

<https://oag.ca.gov/system/files/Central%20Ohio%20Primary%20Care-%20HIPAA%20Breach%20Notification%20INDIVIDUAL%20TEMPLATE%20%28ADULT%29%20v2__Static_Proof_R3%20%281%29.pdf>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Affected Organization · 100% confidence · current**  
   Central Ohio Primary Care vishing incident: Central Ohio Primary Care Physicians, Inc.
2. **Resulted In · 100% confidence · current**  
   Central Ohio Primary Care vishing incident: Patient notification letter dated
3. **Resulted In · 100% confidence · current**  
   Central Ohio Primary Care vishing incident: COPC took affected systems offline, engaged cybersecurity and legal specialists, worked with law enforcement and offered identity protection. It reported no known misuse at notification.
4. **Discovered At · 100% confidence · current**  
   Central Ohio Primary Care vishing incident: 2026-08-25
5. **Used Attack Technique · 100% confidence · current**  
   Central Ohio Primary Care vishing incident: https://attack.mitre.org/techniques/T1566/004/
6. **Occurred At · 100% confidence · current**  
   Cybersecurity incident discovered: 2026-08-25
7. **Resulted In · 100% confidence · current**  
   Central Ohio Primary Care vishing incident: Cybersecurity incident discovered
8. **Occurred At · 100% confidence · current**  
   Patient notification letter dated: 2026-10-16
9. **Resulted In · 100% confidence · current**  
   Central Ohio Primary Care vishing incident: Potentially exposed information included names, addresses, Social Security numbers, patient identifiers, limited health data and financial information. COPC said MyChart was not breached and remained available.
10. **Resulted In · 100% confidence · current**  
   Central Ohio Primary Care vishing incident: Central Ohio Primary Care Physicians, Inc. discovered unauthorized access to sensitive patient files on August 25, 2026.
11. **Resulted In · 100% confidence · current**  
   Central Ohio Primary Care vishing incident: COPC attributed entry to voice phishing, also called vishing, a social-engineering attack conducted by voice.

</details>