Data Breach at Central Ohio Primary Care Group
The incident exposed the personal and financial information of 1.4 million patients, according to official reports.
Updated on Oct. 15, 2026 in Cybersecurity
Live Poll
Do you trust your local healthcare providers to keep your personal information secure?
Central Ohio Primary Care Physicians confirmed that a data breach occurring in August 2026 exposed the personal information of 1.4 million individuals. The organization stated the incident, which was carried out by the ransomware group Chaos, has been contained.
Why it matters
This incident highlights the ongoing vulnerability of large-scale medical record repositories to ransomware actors seeking sensitive personal and financial identifiers. The breach places a significant burden on patients across the region who must now monitor for potential identity fraud.
The incident impacted 1.4 million records across 80 locations, according to official disclosures. The organization has not confirmed the specific ransomware variant or the exact initial vector of entry used by the actors.
The players
Central Ohio Primary Care Physicians
A medical group operating 80 locations in central Ohio that manages patient records and care delivery.
Chaos
A ransomware group responsible for infiltrating medical networks to exfiltrate personal and financial information.
The details
The ransomware group Chaos accessed the network and exfiltrated sensitive data including names, addresses, Social Security numbers, financial records, and limited health data. The organization reports the breach is currently contained, and they are moving to provide affected patients with credit and dark web monitoring services to mitigate potential downstream risks.
Timeline
The data breach occurred during August 2026.
The organization opened a dedicated call center on October 15, 2026.
The Tech Race
This breach follows a pattern set by the 2015 Anthem medical data breach, where large-scale exfiltration of patient records created long-term identity theft risks for millions. It underscores the widening gap between the security maturity of regional health networks and the sophisticated tactics of ransomware syndicates.
Impacted patients will receive notification letters by mail detailing the exposure of their personal and financial data. The organization is providing credit and dark web monitoring services for those affected to help detect fraudulent activity.
The takeaway
Patients should remain vigilant regarding their credit reports and monitor for suspicious communication following the exposure of their Social Security numbers. The organization's containment of the network breach marks the first milestone in a long remediation process for affected residents.
Further reading
For more on the local landscape of medical data security, visit Cybersecurity.
Source note: This article includes information reported by NBC4i.
Live Poll
Do you trust your local healthcare providers to keep your personal information secure?
