RIVERSIDE, CALIFORNIA: February 25, 2026 – Nephrology Associates Medical Group (Nephrology
Associates) determined on December 2, 2025 that a recent data security incident may have the protected health information belonging to certain patients. Nephrology Associates is notifying about this incident and provide resources to assist them. Nephrology Associates encourages individuals to consider the recommendations in this notice, including in the section

Steps You Can Take To Help Protect Personal Information

On or about May 20, 2025, Nephrology Associates identified suspicious activity within our network, and promptly took steps to secure the environment and launched an investigation.  With the support of cybersecurity experts, it learned of information suggesting that an unknown actor gained unauthorized access to its network and acquired files, some of which contained protected health information of patients.  As of today, there is also no evidence of the misuse of any information potentially involved in this incident. 

Based on the investigation of the incident, the potentially affected information will vary by individual, but may have included the following protected health information: name, Social Security number, date of birth, medical or health information, health care treatment or diagnostic information, health insurance information, billing or payment information, or credentialing information.  

We have implemented additional measures to enhance network security and minimize the risk of a similar incident occurring in the future, including enforcing stronger password requirements, more frequent required password changes, reduced access permissions, and offline storage of older data. We also notified the Department of Health and Human Services and will cooperate with any resulting investigation, providing whatever cooperation may be necessary to hold the perpetrators accountable.

Nephrology Associates has established a toll-free call center to answer questions about the incident and related concerns. The call center is available Monday through Friday 6:30am to 3:30pm PT and can be reached at (844) 443-1521.

The privacy and protection of personal and protected health information is a top priority for Nephrology Associates, which deeply regrets any inconvenience or concern this incident may cause.

We are providing the following information to help those wanting to know more about steps they can take to protect themselves and their personal information:

What steps can I take to protect my personal information?

• Please notify your financial institution immediately if you detect any suspicious activity on any of your accounts, including unauthorized transactions or new accounts opened in our name that you do not recognize. You should also promptly report any fraudulent activity or any suspected incidents of identity theft to proper law enforcement authorities.
• You can request a copy of your credit report, free of charge, directly from each of the three nationwide credit reporting agencies. To do so, free of charge once every 12 months, please visit www.annualcreditreport.com or call toll free at 1-877-322-8228. Contact information for the three nationwide credit reporting agencies is listed at the bottom of this page.
• You can take steps recommended by the Federal Trade Commission to protect yourself from identify theft. The FTC’s website offers helpful information at www.ftc.gov/idtheft.
• Additional information on what you can do to better protect yourself is included in your notification letter.

How do I obtain a copy of my credit report?

You can obtain a copy of your credit report, free of charge, directly from each of the three nationwide credit reporting agencies.  To order your credit report, free of charge once every 12 months, please visit www.annualcreditreport.com or call toll free at 1-877-322-8228. Use the following contact information for the three nationwide credit reporting agencies: