.png)
Columbia Medical Practice Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Columbia Medical Practice data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Columbia Medical Practice
Columbia Medical Practice is a multi-specialty medical group based in Howard County, Maryland. Founded in 2004, the group employs dozens of healthcare professionals and staff, serving patients of all ages from newborns to mature adults.
The practice operates under a Patient-Centered Medical Home (PCMH) model.
What Happened?
On Nov. 5, 2025, Columbia Medical Practice experienced a significant cybersecurity event. The ransomware group known as Qilin actor gained access to part of the company’s computer network and installed ransomware, locking files and copying sensitive data. The group later claimed responsibility for the attack and posted about it on the dark web on Nov. 24, 2025.
The breach was reported to the U.S. Department of Health and Human Services on Dec. 5, 2025. According to official disclosures, approximately 3,000 individuals in the United States had their protected health information affected.
Information Exposed:
- Names
- Demographic identifiers (addresses, phone numbers, dates of birth, Social Security numbers, driver’s license numbers, passport numbers, other government identifiers)
- Health information (locations of health services, dates of service, treatment or condition information, diagnoses, diagnosis codes, prescription information, medical history, assigned physician)
- Health services payment information (financial account numbers without security codes, health insurance subscriber or identification numbers, patient account numbers)
Your Rights and Next Steps
If you received a notification about this data breach or believe your information may have been compromised, there are important steps you can take to protect yourself.
First, review your account statements and monitor your credit reports for any suspicious activity. Under federal law, everyone is entitled to a free annual credit report from each of the three major credit bureaus: Equifax, Experian and TransUnion.
You also have the right to place a fraud alert or a credit freeze on your credit file at no cost. A fraud alert requires businesses to verify your identity before issuing new credit, while a credit freeze restricts access to your credit report entirely. These actions can help prevent identity theft and unauthorized use of your personal information.
If you are monitoring the credit of a minor dependent or a deceased loved one, each credit bureau provides instructions on how to check for credit files and place protective alerts or freezes.
Columbia Medical Practice has set up a toll-free assistance line at 1-833-974-3375, available Monday through Friday, 8 a.m. to 8 p.m. Eastern Time, to answer questions related to the breach.
You May Be Entitled to Compensation
If your information was exposed in the Columbia Medical Practice data breach, you may have legal rights and could be eligible for compensation. Lawyers are ready to help individuals affected by this incident understand their options and pursue claims for damages such as identity theft, financial losses or emotional distress.
To learn more and take the next step, complete the below form to join a lawsuit and have your case reviewed.
.svg)