Columbia Medical Practice Data Breach – Investigated by Federman & Sherwood
April 28, 2026 – Federman & Sherwood is investigating a data breach involving Columbia Medical Practice following a notification filed with the Attorney General of Maine.
According to the notice, an unknown cyber actor accessed a portion of Columbia Medical Practice’s computer network on or about November 5, 2025, and installed a computer virus that impacted system files. During the incident, the unauthorized actor also copied certain files from the network.
Following the incident, Columbia Medical Practice engaged cybersecurity specialists to investigate and remediate the issue. A comprehensive review of the affected data was completed on or about March 31, 2026, to determine which individuals and information were impacted.
The information potentially exposed includes individuals’ names in combination with Social Security numbers. The organization reported that approximately six Maine residents were affected and that written notice was provided on or about April 24, 2026.
In response, Columbia Medical Practice has implemented additional safeguards, notified law enforcement and regulators, and is offering affected individuals one year of complimentary credit monitoring and identity restoration services through TransUnion.
Federman & Sherwood is investigating whether Columbia Medical Practice implemented adequate cybersecurity measures and whether affected individuals may have legal claims.
The potentially impacted information may include:
- Name
- Social Security numbers
- Medical information
- Other sensitive information
What is Columbia Medical Practice?
Columbia Medical Practice (CMP) in Howard County, Maryland, is a large, multi-specialty primary care group providing comprehensive medical services for families.
Individuals who received notice of this incident or believe their personal information may have been compromised are encouraged to contact Federman & Sherwood.
Contact Information
Phone: 1-800-237-1277 | Email: info@federmanlaw.com