BASS Medical Group Data Breach Exposes Medical Information

Bass Medical Group, a California-based multispecialty medical group, disclosed a data breach that may have exposed patients' personal and protected health information.

The breach was disclosed to the California Attorney General on Oct. 22, 2026. Bass Medical Group also posted a notice on its website. The company began notifying potentially affected individuals on Oct. 22, 2026.

On or around Sept. 4, 2026, Bass Medical Group discovered suspicious activity within its network environment. Upon making this discovery, the company took steps to secure its network and launched an investigation with independent cybersecurity experts to determine the source and full scope of the incident.

On or about Sept. 22, 2026, the cybersecurity experts determined that certain personal and protected health information may have been accessed or acquired by an unauthorized party.

The types of information potentially exposed in the breach included medical treatment codes or billing information and health insurance information.

Bass Medical Group's response to the breach

Bass Medical Group established a dedicated toll-free call center. Affected individuals can reach the call center at 1-855-711-7083, Monday through Friday from 5:00 a.m. to 5:00 p.m. Pacific Time, excluding major U.S. holidays.

Bass Medical Group provided general guidance on steps that affected individuals can take to help protect their personal information.