Data leak

NCB Management Services Data Breach (Bank of America / Credit Cards)

πŸ“… 2023-04-04
Primary Source β†—

Incident Details

NCB Management Services, a debt purchasing and collections company that works with major banks, suffered a data breach on April 4, 2023. The breach exposed data of approximately 1.08 million individuals who had Bank of America credit card accounts handled by NCB. Exposed data included names, addresses, email addresses, phone numbers, dates of birth, account numbers, and the status of charged-off accounts. Bank of America notified affected customers in May 2023. Notable as a third-party financial services vendor breach affecting major bank customers; illustrates risks of debt collection outsourcing. NCB also worked with other financial institutions so total impact may be higher.

Technical Details

Initial Attack Vector
Unknown network intrusion at NCB Management Services, a debt buyer and collection agency

Timeline

  1. 2023-04-04 Breach occurred
  2. 2023-05-01 Publicly disclosed
  3. 2023-05-22 Customers notified