Columbia Medical Practice notified the New Hampshire Attorney General on April 24, 2026, of a November 5, 2025 incident where an unknown cyber actor accessed its network, installed ransomware to lock files, and exfiltrated patient data including names and Social Security numbers. Approximately 3 New Hampshire residents were affected. The company engaged cybersecurity specialists, notified law enforcement and HHS, and provided one year of credit monitoring via TransUnion.
Affected (this filing): 3