BASS Medical Group Data Breach Investigation
BASS Medical Group reported a data security incident that may have involved personal and protected health information, including health insurance and medical billing or treatment details. Strauss Borrelli PLLC is investigating the reported incident and the legal rights of people whose information may have been affected. If you received a notice or believe your information was involved, you may fill out the secure contact form on this page to help determine whether you may qualify to pursue a claim.
Key Facts at a Glance
- Entity Involved: BASS Medical Group (Healthcare)
- Incident Type: Potential unauthorized access or acquisition following suspicious network activity
- Date of Incident: The period of potential unauthorized activity was not disclosed
- Discovery Date: September 4, 2026
- Official Notice Date: October 22, 2026
- Exposed Information: Names, medical or health information, medical treatment codes or billing information, and health insurance information may have been involved
- Affected Population: Not publicly stated in the available notice
What Happened?
According to BASS Medical Group’s public notice, the organization discovered suspicious activity within its network environment on or around September 4, 2026. BASS reported that it secured the network and began an investigation with assistance from independent cybersecurity experts. The company said that, on or about September 22, the investigation determined certain personal or protected health information may have been accessed or acquired without authorization.
BASS issued its public notice on October 22, and incident information indicates a California Attorney General portal listing followed on October 23. The company also reported notifying the California Attorney General, the FBI, and the U.S. Department of Health and Human Services Office for Civil Rights. BASS stated that it had no evidence suggesting misuse or attempted misuse of the information at the time of its notice. It also reported implementing additional safeguards and establishing an incident call center.
What Information Was Exposed?
The structured incident information provided for this report identifies names, medical or health records, and health insurance information as data that may have been involved. BASS’s notice more specifically describes medical treatment codes or billing information and health insurance information, while also referring generally to personal or protected health information. The company said the same information was not involved for every person.
Healthcare information can be used in medical identity theft, fraudulent patient billing, false insurance claims, insurance-verification scams, or convincing messages about prescriptions and medical services. The available materials do not identify Social Security numbers or financial account numbers as involved, so readers should not assume those categories were affected.
What Should You Do Next?
- Review the notice carefully: Confirm which information the notice says may relate to you. Questions may be directed to BASS’s incident call center at 1-855-711-7083, but use contact details from the official notice and avoid sharing sensitive information with unverified callers.
- Check medical and insurance records: Review patient portals, medical bills, insurance explanations of benefits, prescription activity, and claim histories for providers, treatments, or charges you do not recognize. Promptly dispute suspicious entries with the provider and insurer.
- Watch for healthcare phishing: Be cautious of unexpected calls, emails, or texts requesting insurance verification, payment for medical bills, patient-portal credentials, or prescription information. Contact the healthcare provider or insurer independently rather than using links or numbers in the message.
- Monitor your credit: Obtain credit reports through AnnualCreditReport.com and review them for unfamiliar accounts or inquiries. Although the notice does not identify financial account information, a free fraud alert or security freeze may provide additional protection against identity-based fraud.
- Preserve relevant records: Keep the incident notice, suspicious communications, disputed bills, insurance records, and documentation of any time or money spent responding. These materials may be useful when reporting fraud or evaluating possible legal options.
Your Legal Rights
People whose information may have been involved could have rights under applicable state data-breach, privacy, medical-confidentiality, and consumer-protection laws. Depending on the facts, those rights may include receiving notice, seeking reimbursement for documented losses, or pursuing other remedies. The availability of a claim depends on factors such as where a person lives, what information was involved, whether actual harm occurred, and which laws apply.
Potentially affected individuals should preserve their notice and records of related expenses, fraudulent activity, medical-record errors, or insurance problems. Legal deadlines may apply, and speaking with a data privacy attorney can help an individual understand available options. This general information is not individualized legal advice.
Why Hire Strauss Borrelli PLLC?
Strauss Borrelli PLLC investigates cybersecurity and privacy incidents involving potentially exposed personal and health information. The firm can review the available notice, assess whether applicable privacy or consumer-protection laws may provide a remedy, and explain the legal process in plain language. Individuals who received a BASS notice or experienced related misuse can use the secure contact form to request an evaluation of their circumstances.
If you received a breach notification letter from BASS Medial Group:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
