Central Ohio Primary Care Physicians Reports Vishing Attack Exposing Patient Data

What the notice says

Central Ohio Primary Care Physicians, Inc. (COPC) notified individuals, with a notice filed with the California Attorney General reported 2026-10-30, describing a cybersecurity incident involving protected health information. COPC states it .

According to the notice, . Through that activity, .

The information potentially exposed may have included . COPC states that MyChart (Epic) was not part of the affected systems, and patients with MyChart access can continue to use the portal as usual.

COPC states that . The organization is offering identity theft protection services through IDX, including credit monitoring and a reimbursement insurance policy, with an enrollment deadline of January 16, 2027.

What the notice leaves open

The notice as filed does not state a total number of individuals affected by the incident. It also does not specify a separate date range for when unauthorized access occurred, beyond the August 25, 2026 discovery date. The document does not identify the threat actor or describe how the vishing attack was carried out in detail.