Columbia Medical Practice Data Breach

Columbia Medical Practice, a healthcare provider, recently reported a data breach that potentially exposed sensitive personal information for an undisclosed number of individuals. The breach, which was discovered on November 5, 2025, involved unauthorized access to the practice’s computer network. Sensitive personal and health-related data may have been compromised during this incident.

Columbia Medical Practice’s Data Breach Investigation

On November 5, 2025, Columbia Medical Practice detected suspicious activity on its computer network. It was found that an unknown cyber actor had installed a virus on the systems, which locked the files on the network. In response, Columbia Medical Practice immediately took steps to secure the network, recover the systems, and investigate the incident.

During the investigation, it was confirmed that the cyber actor had copied certain files from the network. The practice is currently reviewing these files to determine what specific data was involved and which individuals may be affected. While the investigation is ongoing, Columbia Medical Practice is providing this notice to ensure transparency and to offer resources to help affected individuals protect their information.

Once the review is complete, individuals whose information may have been impacted will be notified directly via mail.

When Did This Breach Occur?

• The breach was detected on November 5, 2025.

• The cyber actor accessed and copied files on the same day.

• Direct notification letters will be sent once the file review is complete.

What Information Was Breached?

The following types of personal and health information may have been compromised during the breach:

• Personal identifiers: Name, address, phone number, date of birth, Social Security number, driver’s license number, passport number, and other government-issued IDs.

• Health information: Including the location of health services, dates of service, treatment or condition information, diagnosis, diagnosis codes, prescription information, and medical history.

• Health services payment information: Such as financial account numbers (without security codes), health insurance information, subscriber or identification numbers, and patient account numbers.

Importantly, no payment card information or electronic health records stored in the practice’s dedicated EMR system were affected by this breach.

What You Can Do

While Columbia Medical Practice has taken immediate action to secure its systems, individuals affected by this breach should take the following steps to protect their personal information:

• Monitor your accounts: Regularly review your bank accounts, credit card statements, and health insurance records for any unauthorized activity.

• Obtain free credit reports: Review your free credit reports from the three major credit bureaus to ensure there are no signs of fraudulent activity.

• Place a fraud alert or security freeze: You can contact the three major credit bureaus (Equifax, Experian, TransUnion) to place fraud alerts or a security freeze on your credit file to prevent new accounts from being opened in your name.

• Stay alert for identity theft: Be aware of any suspicious emails, phone calls, or messages requesting your personal information. Report any suspicious activity to your bank, healthcare provider, or law enforcement immediately.

• Use the free resources provided: Columbia Medical Practice is providing guidance for monitoring credit reports and how to place fraud alerts or security freezes. Additionally, resources for reporting identity theft are available through the Federal Trade Commission (FTC).

These proactive steps will help minimize the risk of identity theft or fraud and ensure that your personal information is safeguarded.

File a Data Breach Lawsuit Against Columbia Medical Practice

If you were notified about the Columbia Medical Practice data breach or believe your personal information was exposed, you may be entitled to compensation. The breach involved sensitive personal and health-related data, and those affected could face risks of identity theft, medical fraud, and other potential harms.

Joining a class action lawsuit can help you recover damages related to the breach and hold Columbia Medical Practice accountable for its failure to protect your personal data.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve received notice about this breach, discovered you were impacted, or believe your data was exposed, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.