This week ·
Central Ohio Primary Care Physicians
How they got in, as reported. Stolen or reused passwords.
← All items this week- Date
- 20 Oct 2026
- Place
- United States
- Who
- Central Ohio Primary Care Physicians · Healthcare / Medical Clinic
- The way in
- Stolen or reused passwords
- Source
- HIPAA Journal
01 · What was reported
What was reported.
Central Ohio Primary Care Physicians suffered a voice phishing attack that compromised internal systems and led to data theft. The incident affected the personal and protected health information of approximately 1.4 million current and...
The way in, as the source states it: stolen or reused passwords.
02 · What we check for it
What we check for it.
Addresses at your domain in monitored breach databases.
03 · If this happens at your firm
If this happens at your firm.
- Give every work account a second sign-in step, and never use a work password anywhere else.What changes: a code or a tap on the phone at each new sign-in. It stays on. A backup code or a second device covers a lost phone, and the method is changed in the account's security settings.
- Never approve a sign-in you did not start. A prompt you did not start means your password is known.
- Change the password of any account that gets prompts nobody started, the same day.
04 · Source
Source.
Source: HIPAA Journal ↗This page repeats what the source reported, with its date. It says nothing about any firm that is not named in it.