MCBS Data Breach Affects 1.2 Million Individuals
A data breach at MCBS, a medical business management company, exposed the personal information of over 1.2 million individuals. The attack was attributed to the PEAR ransomware group, who also claimed responsibility for breaches at Motility Software Solutions and Tri-Century Eye Care, and have released stolen data online.
A significant data breach at MCBS, a medical business management company based in Atlanta, has compromised the personal information of more than 1.2 million individuals. The breach occurred in September 2025, following a targeted attack by the PEAR ransomware group. According to a data breach notification posted on MCBS’s website, the attackers gained access to systems between September 22 and September 26, leading to the theft of sensitive data including names, addresses, Social Security numbers, dates of birth, health insurance details, and medical records. The breach impacted seven healthcare organizations. The PEAR ransomware group, which emerged in mid-2025, has claimed responsibility for the attack and has made the stolen data available for download on its leak website, which currently lists over 100 alleged victims. The group has also been linked to the Motility Software Solutions hack, affecting 766,000 people, and the Tri-Century Eye Care breach, impacting 200,000 individuals. The US Department of Health and Human Services maintains a data breach tracker that details the scope of the MCBS incident.