MCBS Healthcare Data Breach Exposes Sensitive Information of 1.2 Million Patients
Medical Computer Business Services (MCBS), a Georgia-based healthcare billing and practice-management company, has confirmed a 2025 network breach that compromised the personal and medical data of over 1.2 million individuals. The incident, disclosed in late June, involved unauthorized access to MCBS’s systems between September 22 and 26, 2025.
MCBS, which provides billing, coding, and administrative services to healthcare providers, acts as a data aggregator for patient records. An investigation concluded on May 28, 2025, revealed that exposed data may include full names, Social Security numbers, dates of birth, health insurance details, medical histories, diagnoses, and treatment information though the exact data varies by individual.
The breach affected patients of at least seven healthcare providers, including South Georgia Radiology Consultants, SkinPath Solutions, and Radiology Associates. MCBS has notified impacted individuals, though those who received medical services in Georgia are advised to verify whether their provider worked with MCBS.
The attack has been attributed to the PEAR (Pure Extraction and Ransom) ransomware group, which claims to have exfiltrated 3.3 terabytes of data, including HR records, business operations details, payment information, and email correspondence. While the group has leaked the data online, its authenticity has not been independently verified.
Colorado Skin Pathology cybersecurity rating report: https://www.rankiteo.com/company/colorado-skin-path
Radiology Associates of Macon cybersecurity rating report: https://www.rankiteo.com/company/radiology-associates-of-macon
"id": "COLRAD1785234648",
"linkid": "colorado-skin-path, radiology-associates-of-macon",
"type": "Breach",
"date": "9/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '1.2 million individuals',
'industry': 'Healthcare',
'location': 'Georgia, USA',
'name': 'Medical Computer Business Services (MCBS)',
'type': 'Healthcare Billing and Practice-Management '
'Company'},
{'industry': 'Healthcare',
'location': 'Georgia, USA',
'name': 'South Georgia Radiology Consultants',
'type': 'Healthcare Provider'},
{'industry': 'Healthcare',
'name': 'SkinPath Solutions',
'type': 'Healthcare Provider'},
{'industry': 'Healthcare',
'name': 'Radiology Associates',
'type': 'Healthcare Provider'}],
'attack_vector': 'Unauthorized Access',
'customer_advisories': 'Impacted individuals notified; Georgia residents '
'advised to verify provider affiliation with MCBS',
'data_breach': {'data_exfiltration': '3.3 terabytes of data',
'number_of_records_exposed': '1.2 million individuals',
'personally_identifiable_information': ['Full names',
'Social Security '
'numbers',
'Dates of birth'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Identifiable '
'Information',
'Medical Data',
'Health Insurance Details',
'Diagnoses',
'Treatment Information']},
'date_detected': '2025-09-26',
'date_publicly_disclosed': '2025-06-01',
'date_resolved': '2025-05-28',
'description': 'Medical Computer Business Services (MCBS), a Georgia-based '
'healthcare billing and practice-management company, confirmed '
'a 2025 network breach that compromised the personal and '
'medical data of over 1.2 million individuals. The incident '
'involved unauthorized access to MCBS’s systems between '
'September 22 and 26, 2025. The breach affected patients of at '
'least seven healthcare providers, including South Georgia '
'Radiology Consultants, SkinPath Solutions, and Radiology '
'Associates. The attack has been attributed to the PEAR (Pure '
'Extraction and Ransom) ransomware group, which claims to have '
'exfiltrated 3.3 terabytes of data.',
'impact': {'brand_reputation_impact': 'Likely significant',
'data_compromised': 'Personal and medical data of 1.2 million '
'individuals',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential',
'payment_information_risk': 'Possible',
'systems_affected': 'Healthcare billing and practice-management '
'systems'},
'investigation_status': 'Concluded',
'motivation': 'Data Exfiltration, Extortion',
'ransomware': {'data_exfiltration': 'Yes',
'ransomware_strain': 'PEAR (Pure Extraction and Ransom)'},
'regulatory_compliance': {'regulations_violated': ['HIPAA']},
'response': {'communication_strategy': 'Notifications sent to impacted '
'individuals'},
'threat_actor': 'PEAR (Pure Extraction and Ransom) ransomware group',
'title': 'MCBS Healthcare Data Breach Exposes Sensitive Information of 1.2 '
'Million Patients',
'type': 'Data Breach, Ransomware'}