Incident

Ottawa Family Physicians reports data breach


Learn More

Ottawa Family Physicians (OFP), a Kansas-based medical practice reports a data breach. The incident involved unauthorized access to the practice's computer system, potentially exposing sensitive patient information.

The security breach was first detected on December 15, 2024, when the practice discovered suspicious activity within its computer network. The investigation, conducted with the assistance of external cybersecurity experts, confirmed that an unauthorized party had accessed the network between December 10 and December 15, 2024.

During this five-day period, the intruder had access to files containing confidential patient information. The exposed data includes:

  • Full names
  • Addresses
  • Dates of birth
  • Medical information
  • Additional unspecified confidential patient data (varying by individual)

The nature of the attack and the number of affected individuals are disclosed, but are more than 500

The practice has secured their systems and began sending notification letters to affected individuals on February 13, 2025, healthcare providers are required by law to report such incidents to federal authorities when they affect 500 or more individuals.

Ottawa Family Physicians reports data breach