Columbia Orthopaedic Group Hit by LOCKBIT 5.0 Ransomware Attack, Exposing Sensitive Patient Data Columbia Orthopaedic Group, a leading orthopedic medical practice based in Columbia, Missouri, disclosed a data breach on June 18, 2026, following a ransomware attack by the cybercriminal group LOCKBIT 5.0. The firm, established in 1965, specializes in sports medicine, joint replacements, spine care, and trauma treatment, serving patients across multiple specialty programs. The attack was first claimed by LOCKBIT 5.0 on May 25, 2026, when the group announced on the dark web that it had exfiltrated sensitive data from Columbia Orthopaedic Group, threatening to publish the information within two weeks. While the exact types of compromised data remain unspecified, the breach may have exposed personally identifiable information (PII), medical records, or financial details. The incident has prompted an investigation by Shamis & Gentile P.A., a class action law firm specializing in data breach cases, which is evaluating potential legal action for affected individuals. The breach was formally reported to the U.S. Department of Health and Human Services, though further details on the scope of exposure are pending.

LockBit Claims Responsibility for Potential Columbia Orthopaedic Group Cyberattack The ransomware group LockBit has claimed responsibility for a suspected cyberattack targeting Columbia Orthopaedic Group, a medical provider offering surgical and non-surgical orthopedic care in Columbia, Missouri. Details about the breach including the type of data compromised and the number of affected individuals remain unclear, as the organization has not yet confirmed the incident. Legal teams are investigating whether a class action lawsuit can be filed on behalf of current and former patients, as well as affiliates, who may have had their personal or medical information exposed. Potential claims could cover losses related to privacy violations, out-of-pocket expenses, and time spent addressing the breach. While the full scope of the attack is still under review, the incident highlights ongoing risks to healthcare providers, particularly from ransomware groups like LockBit, which frequently target sensitive data for extortion. Further updates are expected as the investigation progresses.