Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

500k Impacted by Data Breach at Debt Buyer NCB

NCB Management Services is informing roughly 500,000 individuals of a data breach impacting their personal information.

National accounts receivable management company and debt buyer NCB Management Services has started informing roughly 500,000 individuals that their personal information was compromised in a data breach.

An unauthorized party compromised some of NCB’s systems on February 1 and gained access to Bank of America credit card accounts information, NCB says. The incident was discovered on February 4, and the data theft was confirmed on March 8.

Exposed personal information, the company says, includes names, addresses, phone numbers, email addresses, birth dates, driver’s license numbers, Social Security numbers, and employment positions.

Financial information such as pay amounts, credit card numbers, routing numbers, account numbers and balance, and/or account statuses was also stolen.

According to NCB, the impacted credit card accounts had already been closed when the cyberattack occurred. The incident did not involve the compromise of Bank of America systems, NCB underlines.

The company also says that it is not aware of the potentially accessed information being distributed or used maliciously.

“The unauthorized activity on NCB’s systems has been stopped, and NCB has obtained assurances that the third party no longer has any of the information on its systems,” the company says.

NCB did not share information on the type of cyberattack it suffered, but its description of the incident suggests that it engaged in communication with the attackers, which implies that a ransom demand might have been made.

Advertisement. Scroll to continue reading.

NCB informed the Maine Attorney General’s Office that it was sending notification letters to nearly 500,000 individuals affected by the incident.

Earlier this week, national consumer rights law firm Wolf Haldenstein Adler Freeman & Herz LLP announced that it was investigating the incident on behalf of impacted individuals.

Related: ChatGPT Data Breach Confirmed as Security Firm Warns of Vulnerable Component Exploitation

Related: 14 Million Records Stolen in Data Breach at Latitude Financial Services

Related: NBA Notifying Individuals of Data Breach at Mailing Services Provider

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Discover strategies for vendor selection, integration to minimize redundancies, and maximizing ROI from your cybersecurity investments. Gain actionable insights to ensure your stack is ready for tomorrow’s challenges.

Register

Dive into critical topics such as incident response, threat intelligence, and attack surface management. Learn how to align cyber resilience plans with business objectives to reduce potential impacts and secure your organization in an ever-evolving threat landscape.

Register

People on the Move

The US arm of networking giant TP-Link has appointed Adam Robertson as Director of Information and Security.

Cyber exposure management firm Armis has promoted Alex Mosher to President.

Software giant Atlassian has named David Cross as its new CISO.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.