Columbia Medical Practice

Columbia Medical Practice, a healthcare provider, disclosed a ransomware incident on November 5, 2025, where an external actor encrypted files and exfiltrated data. The breach affected 6 Maine residents, exposing names and Social Security numbers. Notices were sent on April 24, 2026, offering 12 months of credit monitoring.

Columbia Medical Practice, a multi-specialty primary healthcare facility in Maryland, experienced a ransomware attack on November 5, 2025. An unknown cyber actor accessed the network, installed a virus to lock files, and copied data. The incident affected approximately 3 New Hampshire residents, whose name and Social Security numbers were exposed. The organization engaged cybersecurity specialists, notified HHS and federal law enforcement, and provided credit monitoring services.

Columbia Medical Practice, a multi-specialty primary healthcare facility in Maryland, experienced a ransomware attack on November 5, 2025. An unknown cyber actor accessed the network, installed malware to lock files, and copied data. The organization engaged cybersecurity specialists, contained the incident, and completed a file review on March 31, 2026. Affected data includes names and health information. The organization is offering complimentary identity monitoring services.

COLUMBIA MEDICAL PRACTICE filed a data-breach notice with the Illinois Attorney General in April 2026 (case 26-04-1156). The register records the breach as discovered on March 31, 2026. Personal information types reported: medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Columbia Medical Practice reported to HHS on 2025-12-05 a Hacking/IT Incident affecting 94,131 individuals. Breached information located on Network Server.