INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Central Ohio Primary Care Physicians Data Breach Affects 1.4 Million

| 2026-10-20 15:31 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
Central Ohio Primary Care Physicians, one of the largest independent physician-owned primary care medical groups in the United States, experienced a cybersecurity incident involving the personal and protected health information of approximately 1.4 million current and former patients, according to local media reports on October 20, 2026. The Westerville, Ohio-based medical group was targeted by a voice phishing (vishing) attack in August 2026 that resulted in unauthorized access to internal systems, with files containing patient information exfiltrated during the incident. A ransomware group called Chaos added Central Ohio Primary Care Physicians to its dark web data leak site and threatened to publish the stolen data if payment was not made, but the entity has since enhanced security measures to reduce the risk of similar incidents in the future.
Technical Mitigations AI-generated
• Review and patch the Chaos ransomware group's vulnerabilities to prevent similar attacks in the future. • Implement enhanced dark web monitoring services to detect potential data leaks or misuse of patient information. • Block vishing (voice phishing) calls by implementing a robust voice call blocking system.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
NORTH_AMERICA NORTH_AMERICA healthhealth
Incident Timeline
‎August 2026
Threat actors used voice phishing to target the Westerville, Ohio-based medical group in August 2026.
tactic Phishing
The Westerville, Ohio-based medical group, which has more than 80 locations in Central Ohio, experienced a voice phishing (vishing) attack in August 2026 that resulted in unauthorized third-party obtaining credentials that provided access to internal systems.
general_metric 80 locations
The Westerville, Ohio-based medical group, which has more than 80 locations in Central Ohio, experienced a voice phishing (vishing) attack in August 2026 that resulted in unauthorized third-party obtaining credentials that provided access to internal systems.
‎August 25, 2026
Threat actors, identified as the ransomware group Chaos, added Central Ohio Primary Care Physicians to their dark web data leak site and threatened to publish stolen patient information unless payment was made.
industry Health
General Document Context
organisation Social Security
The files have now been reviewed and found to contain patient names, addresses, Social Security numbers, financial information, health information, and other identifying information.
‎Oct 20, 2026
Threat actors exploited Central Ohio Primary Care Physicians' cybersecurity systems to expose the personal and protected health information of approximately 1.4 million current and former patients.
industry Health
General Document Context
general_metric 1.4 current patients
Central Ohio Primary Care Physicians Data Breach Affects 1.4 Million Patients Posted By Steve Alder on Oct 20, 2026
tactic Data Breach
Central Ohio Primary Care Physicians Data Breach Affects 1.4 Million Patients Posted By Steve Alder on Oct 20, 2026
organisation Central Ohio Primary Care Physicians
Central Ohio Primary Care Physicians, one of the largest independent physician-owned primary care medical groups in the United States, has experienced a cybersecurity incident that involved the personal and protected health information of approximately 1.4 million current and former patients, according to local media reports.
Intelligence Sources
HIPAA Journal 2026-10-20