Nephrology Associates Medical Group, a medical group based in Riverside, CA, discovered suspicious activity in an employee email account on or about May 20, 2025. An unauthorized individual may have accessed personal information stored in the account. The breach dates span May 19–22, 2025. The organization engaged cybersecurity experts, implemented additional security features, and is offering Kroll credit monitoring to affected individuals.