Columbia Orthopaedic Group, a healthcare provider in mid-Missouri, reportedly experienced a data breach in June 2026. The LockBit 5.0 ransomware group claimed responsibility for the attack on June 9, 2026, and the company was listed as a victim on ransomware-tracking sites by June 11, 2026. Official confirmation or a public breach notification from Columbia Orthopaedic Group has not been found.
The attackers claimed to have accessed sensitive healthcare data, though specific types such as SSNs, financial data, or full medical record elements have not been officially confirmed. The number of affected individuals remains undisclosed, and while the company operates in Missouri, specific states affected have not been publicly detailed.
Details surrounding this incident, including the full scope of data compromised and the number of individuals affected, may emerge in the future. Notifications to consumers, if applicable, may also be delayed.