By HFT Staff

Central Ohio Primary Care Physicians, Inc. (COPC) has identified and responded to a cybersecurity incident that may have exposed the personal information of its patients and employees. 

On August 25, 2026, COPC discovered that it had experienced a cybersecurity incident resulting from a social-engineering, or “vishing” (voice phishing), attack, carried out in an attempt to solicit a financial response. Through this attack, a criminal threat actor was able to gain unauthorized access to certain files containing protected health information. 

Upon detection, COPC engaged cybersecurity experts to assess and contain the incident. The organization has since been working closely with authorities and cybersecurity professionals to assess exposure, reinforce security measures and focus on preventing future incidents. 

To date, COPC is unaware of any misuse (or attempted misuse) of personal information for identity theft or fraud stemming from the Incident. The information potentially exposed may have included protected health information, which could include sensitive personal information such as first and last name, address, Social Security Number, limited health related patient data including patient ID number, financial information and other potential identifying information. 

While the full extent of the incident is still under review, our initial investigation discovered that there are approximately 1.4 million individuals impacted.