Supply chain β›“ Supply Chain

VCU Health System Third-Party Breach (May 2023)

πŸ“… 2023-05-01 🏒 Credit Control Corporation
Primary Source β†—

Incident Details

Debt Collection Agency Data Breach Affects 345,523 Individuals. R&B Corporation of Virginia, doing business as Credit Control Corporation (CCC), has recently reported a data breach to the HHS’ Office for Civil More than 286,000 individuals have been affected by a data breach at Credit Control Corporation – a debt collection agency used by many hospitals for collecting unpaid medical bills. Third-party company: Credit Control Corporation.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Credit Control Corporation
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2023-05-01 Breach occurred
  2. 2023-05-18 Publicly disclosed