COPC: Verify Before Acting
Central Ohio Primary Care’s 15 October update estimates 1.4 million people affected by voice-phishing file access discovered on 25 August. Its earlier statement dates to 4 September; final scope remains under review.
Possible fields vary: names, addresses, Social Security numbers, patient identifiers, limited health and financial information, and other identifiers. COPC reports containment, no further access, MyChart unaffected and no known identity-fraud misuse or attempts.
An unaffected portal does not negate file exposure. Nor does no known misuse establish future safety.
Verify your status before responding
Affected people with available contact details receive letters. Without one, follow COPC’s notice to its response route for confirmation and an enrolment code if eligible.
Start from a page you navigate to yourself, not an unexpected message offering help. A convincing caller, familiar name or knowledge of personal details is not an authentication method. Decide where to make contact before deciding what to disclose.
IDX’s response page lists adult credit monitoring, dark-web scanning and fraud-resolution assistance. Enrolment closes on 16 January 2027. Its helpline, 1-866-200-0918, operates weekdays from 9am to 9pm Eastern Time, excluding holidays. These are the response provider’s current terms, not a guarantee that every reader qualifies.
Choose the protection, not just the label
The US Federal Trade Commission distinguishes two free credit controls. A freeze restricts new-credit access, lasts until lifted and requires contacting all three bureaus. You may need to lift it for your own credit application. An initial fraud alert asks businesses to verify identity, lasts one year and can be placed through one bureau, which informs the other two.
Monitoring detects changes; it is not the same as preventing a new account. A freeze and an alert can coexist. Choose deliberately rather than assuming that accepting one service settles every risk.
