Capital Family Physicians, a healthcare provider, experienced a data breach in 2026. This incident was a ransomware attack carried out by the LockBit5/CLB5 group, which disrupted patient portals and access to care. The breach was first reported on May 29, 2026.
The breach exposed sensitive data belonging to approximately 167,303 individuals. The compromised data types include Social Security numbers (124,761 affected), full patient medical records, diagnoses (49,798 affected), treatment history, partner agreements, payroll information, and financial information. The data leak also included 2.3 million lines of full patient data that were sold on ransomware markets. The event affected patients across the United States, with a class action filing noted in Connecticut.
Details about this breach may continue to emerge. Official breach notification letters and statements from the company are not publicly available in search results.