Social EngineeringHealthcareHealthcareVishingCustomer Data InvolvedPHIGovernment IDIdentity (basic)Health (basic)FinancialMediumContained

Central Ohio Primary Care Physicians, Inc.

bd_a39ceb2e7fda4098 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Aug 25, 2026

Filed

Oct 1, 2026

To disclose

—

Affected

709state residents only

Confidence

67%

Full breach record for Central Ohio Primary Care Physicians, Inc. →2 incidents on file

Central Ohio Primary Care Physicians, Inc. (COPC) experienced a cybersecurity incident on August 25, 2026, resulting from a vishing (voice phishing) attack. A criminal threat actor gained unauthorized access to files containing protected health information, including names, addresses, Social Security Numbers, patient IDs, and financial information. COPC contained the incident by taking systems offline and engaged cybersecurity experts and law enforcement. No evidence of misuse was found. Identity protection services are being offered to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 25, 2026

Discovered

Oct 1, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed709 affectedView incident

Name: Central Ohio Primary Care Physicians, Inc.
norm: central ohio primary care physicians

Name: Central Ohio Primary Care Physicians, Inc.
norm: central ohio primary care physicians
Industry: Healthcarellm

Discovered: Aug 25, 2026
Materiality determined: —
Notification sent: Oct 16, 2026
Affected individuals: 709state-resident count only
Data types: PHIGovernment IDIdentity (basic)Health (basic)Financial
Attack vector: Phishing
MITRE ATT&CK: T1566 Phishing
Threat actor: External
Initial access: phishing_link

During the incident: Activated its incident-response protocols
Engaged cybersecurity and legal experts
Took impacted systems offline
Working with law enforcement in their criminal investigation of the attack
Changes made: Implement additional security measures to make its computer systems even stronger than before
Offering identity theft protection services through IDX
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1800-central-ohio-primary-care-physicians-inc-copc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 1, 2026
Raw hash: e20e8bd1f6db2db364c441aaf2c73433571fff3ca0f1244d6943e106ef8fed54

Reporting entityCentral Ohio Primary Care Physicians, Inc.

Victim entityCentral Ohio Primary Care Physicians, Inc.

Incidentdiscovered Aug 25, 2026

Stated responseActivated its incident-response protocols

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov