MCBS Data Breach Exposes Sensitive Patient Information in Augusta, GA A network security incident at MCBS, LLC, a medical billing service provider for healthcare practices, has potentially exposed the personal and medical data of patients linked to Stephen W. Brown & Radiology Associates of Augusta. The breach was first detected on September 25, 2025, when MCBS identified unauthorized access to its systems. Following an investigation with external cybersecurity experts, MCBS determined on May 28, 2026, that sensitive files may have been accessed or acquired between September 22–26, 2025. The compromised data includes: - Full names and addresses - Social Security numbers - Dates of birth - Health plan and insurance details - Medical histories, diagnoses, and treatment records MCBS stated it has no evidence of misuse or fraud stemming from the incident but is offering 12 months of complimentary identity monitoring through Kroll as a precaution. Affected patients were notified via mail and advised to review medical statements and credit reports for suspicious activity. The breach highlights ongoing risks in third-party healthcare data handling, with MCBS emphasizing the importance of vigilance despite the lack of confirmed fraud. The incident remains under review.

MCBS LLC Discloses Data Breach Affecting Healthcare Patients MCBS LLC, a Georgia-based medical billing and business services provider founded in 1981, has reported a data breach involving unauthorized access to its network. The company, which serves small and medium-sized healthcare practices with billing, coding, and administrative support, disclosed the incident to the California Attorney General on June 26, 2026, and posted a notice on its website. The breach was first detected on September 25, 2025, prompting an investigation with external cybersecurity experts. A forensic review later revealed that unauthorized access occurred over a four-day period (September 22–26, 2025), during which files containing sensitive personal and health information may have been compromised. Since MCBS operates as a third-party vendor for healthcare providers, the affected individuals are patients of its client practices. The exposed data includes personally identifiable information (PII) and protected health information (PHI), such as names, dates of birth, addresses, Social Security numbers, medical histories, treatment details, and health insurance information. In response, MCBS is notifying impacted individuals on behalf of its healthcare clients and offering complimentary identity protection services through a third-party provider. The company has also set up a dedicated toll-free response line to assist affected individuals with questions and protective measures. Notification letters include details on enrollment, fraud alerts, credit freezes, and credit report access.