Supply chain
β Supply Chain
VCU Health System Third-Party Breach (May 2023)
Primary Source βIncident Details
Debt Collection Agency Data Breach Affects 345,523 Individuals. R&B Corporation of Virginia, doing business as Credit Control Corporation (CCC), has recently reported a data breach to the HHS’ Office for Civil More than 286,000 individuals have been affected by a data breach at Credit Control Corporation β a debt collection agency used by many hospitals for collecting unpaid medical bills. Third-party company: Credit Control Corporation.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Credit Control Corporation
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2023-05-01 Breach occurred
- 2023-05-18 Publicly disclosed