MCBS Medical Billing Breach Exposes 1.26M Records

Medical Computer Business Services (MCBS), a Georgia medical billing and practice-management provider, reported a network breach affecting 1,261,464 people. The company told the U.S. Department of Health and Human Services (HHS) that unauthorized access occurred in 2025. HHS lists MCBS, LLC as a business associate and identifies the incident as a hacking event involving a network server. The HHS breach portal provides the reported count and incident classification.

BleepingComputer’s report says MCBS identified access between September 22 and 26, 2025, completed its investigation on May 28, 2026, and reported the result to HHS in June. The affected information may include full names, addresses, Social Security numbers, dates of birth, health-plan beneficiary and insurance identifiers, medical history, conditions, treatment, and diagnosis information. The data involved varies by person, so the category list does not mean every affected record contained every item.

MCBS provides billing and administrative services for healthcare organizations. That business-associate role matters because affected people may know their doctor or hospital but not the vendor that processed their records. BleepingComputer identified seven covered entities named in the company notice, including South Georgia Radiology Consultants, SkinPath Solutions, and Stephen W. Brown and Radiology Associates.

The PEAR ransomware group claimed responsibility and alleged that it stole 3.3 terabytes. That volume and the additional data categories claimed by the group have not been independently verified by the cited reporting. Do not treat a leak-site claim as proof of the contents or authenticity of all posted files.

People who may have received care from an affected provider should use the provider’s official notice to determine whether their records were involved and what protections are offered. MCBS’s reported advice, as relayed by BleepingComputer, was to consider a fraud alert or credit freeze. A credit freeze can restrict new credit opened in a person’s name, but it does not prevent misuse of health insurance identifiers or protect medical accounts. Affected people should also watch for provider-specific instructions and review insurance explanations of benefits for unfamiliar claims.