Data leak
NCB Management Services Data Breach (Bank of America / Credit Cards)
Primary Source βIncident Details
NCB Management Services, a debt purchasing and collections company that works with major banks, suffered a data breach on April 4, 2023. The breach exposed data of approximately 1.08 million individuals who had Bank of America credit card accounts handled by NCB. Exposed data included names, addresses, email addresses, phone numbers, dates of birth, account numbers, and the status of charged-off accounts. Bank of America notified affected customers in May 2023. Notable as a third-party financial services vendor breach affecting major bank customers; illustrates risks of debt collection outsourcing. NCB also worked with other financial institutions so total impact may be higher.
Technical Details
- Initial Attack Vector
- Unknown network intrusion at NCB Management Services, a debt buyer and collection agency
Timeline
- 2023-04-04 Breach occurred
- 2023-05-01 Publicly disclosed
- 2023-05-22 Customers notified