Data breach at medical billing firm MCBS affects 1.26 million people
Medical billing firm MCBS disclosed a 2025 network breach exposing sensitive information of over 1.2 million people. The company reported that 1,261,464 people have been impacted. Exposed data includes full name, physical address, social security number, date of birth, an…
Intelligence analysis by Llama

MCBS, a regional private medical billing and practice-management company, disclosed a 2025 network breach exposing sensitive information of over 1.2 million people. The company reported that 1,261,464 people have been impacted, and exposed data includes full name, physical address, social security number, date of birth, and medical history.
Imagine you go to the doctor and they take a picture of your medical history. But someone hacks into the doctor's computer and gets all the pictures of everyone's medical history. That's what happened to a company called MCBS, which helps doctors keep track of their patients' medical information. Over 1.2 million people's information was stolen, including their names, addresses, and medical history.
Analysis
A $60B Vote of Confidence
The data breach at MCBS, a regional private medical billing and practice-management company, has exposed sensitive information of over 1.2 million people. The company reported that 1,261,464 people have been impacted, and exposed data includes full name, physical address, social security number, date of birth, and medical history. This incident serves as a reminder of the importance of protecting sensitive information in the healthcare industry.
Why Cursor?
The breach was claimed by the PEAR (Pure Extraction and Ransom) ransomware group, which alleges it exfiltrated 3.3 terabytes of data from MCBS systems. The data has been fully leaked online, but BleepingComputer did not examine the cache and cannot validate its authenticity. The attack has been attributed to the PEAR ransomware group, which has been known to target healthcare organizations in the past.
The Road Ahead
MCBS has urged potentially impacted individuals to place a fraud alert and consider placing a security freeze on their credit file. Individuals who have received medical services in Georgia are advised to contact their healthcare provider to determine whether it works with MCBS and whether their personal information may have been affected by the incident. The company has also highlighted the importance of monitoring credit reports and taking steps to protect personal information.
Key points
- MCBS disclosed a 2025 network breach exposing sensitive information of over 1.2 million people.
- The company reported that 1,261,464 people have been impacted.
- Exposed data includes full name, physical address, social security number, date of birth, and medical history.
- The breach was claimed by the PEAR (Pure Extraction and Ransom) ransomware group.
- MCBS has urged potentially impacted individuals to place a fraud alert and consider placing a security freeze on their credit file.
MCBS has taken steps to address the breach, including conducting an investigation and notifying potentially impacted individuals. The company has also highlighted the importance of protecting personal information and has urged individuals to take steps to monitor their credit reports and protect their information.
The breach has exposed sensitive information of over 1.2 million people, which could lead to identity theft and other forms of financial fraud. Individuals who have been impacted by the breach should take steps to protect their information and monitor their credit reports closely.


