Columbia Medical Practice reports hacking affecting 94,131 patients
Columbia Medical Practice, a healthcare provider in Maryland, submitted a breach filing to HHS OCR on 12/05/2025. The incident involved a hacking or IT incident targeting a network server. This breach impacts 94,131 individuals. As a covered entity, the provider is responsible for notifying affected patients and the government. Other healthcare organizations should review their own cybersecurity controls to ensure they are robust against similar threats. The submission date indicates when the report was filed, not necessarily when the breach occurred.
Sources differ:
- The HHS OCR breach portal record lists 94,131 individuals; HIPAA Journal reported an earlier HHS portal figure of up to 3,000 individuals.