BASS Medical Group Notifies Individuals After Network Intrusion Exposes Health Data

What the notice says

BASS Medical Group filed a notice with the California Attorney General, reported October 22, 2026, stating that personal and protected health information may have been involved in a data security incident. The notice describes the event as a situation in which BASS Medical Group .

According to the notice as filed, BASS Medical Group on or around September 4, 2026. An investigation supported by outside cybersecurity specialists followed, and on or about September 22, 2026 the organization determined that certain information .

The categories of information BASS Medical Group identifies as potentially involved include , though the notice notes that not all information was involved for all individuals. BASS Medical Group states it has no evidence of misuse of this information so far.

What the notice leaves open

The notice as filed does not state how many individuals were affected. It also does not describe how the unauthorized activity originated or how long it may have been occurring before discovery. BASS Medical Group says it , and established a call center for affected individuals, but the filing does not detail findings beyond the categories of information listed.