Central Ohio Primary Care Physicians faces a proposed class action after its August 2026 data breach. The case seeks relief for people whose private information was allegedly compromised in that incident. Central Ohio Primary Care Physicians (COPC) is a central Ohio primary-care medical group.
COPC says in its Oct. 15 security update that it discovered the intrusion on August 25, 2026, after a criminal actor used voice phishing to reach files. HIPAA Journal reports in its Oct. 20 coverage that about 1.4 million current and former patients and employees may be affected.
Official resources:
- Read the official guidance from Copcp — Use this primary source to verify the official guidance.
- Read the official notice from Idx — Use this primary source to verify the official announcement.
Table of Contents
- How did the intrusion happen?
- What information was exposed?
- What does the lawsuit allege?
- What should you do now?
How did the intrusion happen?
COPC describes the event as a criminal vishing attack aimed at a financial payout. Vishing means fake phone calls that trick staff into giving access.
COPC says the incident is contained and outside cybersecurity experts helped investigate. Law enforcement was notified. COPC says its Epic MyChart portal was not impacted.
What information was exposed?
TEISS, reporting on COPC's notice, lists names, addresses, Social Security numbers, financial information, patient ID numbers and limited health-related data. The notice also cites additional personal identifiers.
COPC began mailing written notices around Oct. 16, 2026, according to the Massachusetts Attorney General filing. That filing directs recipients to free IDX credit monitoring at the COPC response site.
What does the lawsuit allege?
eClassActions reports a proposed class action was filed after the breach for people whose private information was allegedly compromised. The filing seeks court relief for the affected group. ClassActionU reports in its Oct.
21 roundup that the case was filed Oct. 16, 2026, in Franklin County Court of Common Pleas. The allegations are not proven and there is no liability finding.
What should you do now?
Cole & Van Note and other national firms announced investigations into potential class claims in October 2026. Affected people should watch mail, monitor credit and consider IDX enrollment.
Use your notice letter as your guide: Keep your notice in a safe place because later deadlines may ask for its date or code. Do not discard it after enrolling in monitoring.
- Open every COPC letter and save the notice and envelope.
- Enroll in the free IDX monitoring offered in the letter if you choose it.
- Check bank, credit-card and Explanation of Benefits statements for unfamiliar activity.
- Place a fraud alert or freeze if you see misuse and keep proof of time spent.