Breaches and incidents
BASS Medical Group (Walnut Creek, California): network intrusion, data may have been accessed
BASS’s notice dated 22 Oct 2026 (filed with the California AG) says it discovered suspicious network activity on or around 4 Sep 2026 and on or about 22...
- Disclosed
- Verification
- Checked against a primary source
What happened
- BASS’s notice dated 22 Oct 2026 (filed with the California AG) says it discovered suspicious network activity on or around 4 Sep 2026 and on or about 22 Sep 2026 determined personal and/or protected health information “may have been accessed or acquired without authorization”; HIPAA Journal reports the data was limited to treatment codes, billing and health insurance information.
- Root cause: not disclosed.
- HIPAA Journal reports a group called Booba Project claimed the attack and says 100 GB was taken; BASS did not name a group.
- BASS says it implemented additional safeguards; letters began 22 Oct 2026. The number affected was not disclosed.