Central Ohio Primary Care Data Breach Investigation

COPC says it discovered the incident on August 25, 2026. A voice-phishing attack gave an unauthorized party access to files containing protected health information. Its October 15 update puts the initial affected-person estimate at approximately 1.4 million; the review remains ongoing.

According to COPC, the incident is contained, MyChart (Epic) was unaffected, and it had identified no related identity theft or fraud as of that update.

We would like to hear from current or former COPC patients and employees, particularly anyone who:

• Received a breach notification or an offer of identity protection related to COPC.
• Experienced suspicious calls, messages, account activity, or suspected identity theft involving private information.
• Spent time or money responding to the incident or has records of other related harm.

You do not need to gather every document before contacting us. Being a patient or employee does not, by itself, establish that your records were exposed, and suspicious activity requires review to determine whether it is connected to this incident.

Hall Attorneys is reviewing the safeguards used to protect patient and employee information, how the unauthorized access occurred, the timing and adequacy of notices, and the consequences for affected people.

We are evaluating whether the available evidence supports legal claims, including a potential class action. This page describes an investigation. Hall Attorneys has not filed a lawsuit concerning this incident, and no recovery is promised.