Date of Breach: Capital Family Physicians reported the breach to the U.S. Department of Health and Human Services Office for Civil Rights, affecting 2,545 individuals in North Carolina. A ransomware group calling itself cmdorganization separately claimed responsibility, listing the practice on its leak site on or around May 29, 2026.
Protected health information, which may include names, medical records, and billing information; the practice has not publicly detailed the complete list of affected data elements