Supply chain
β Supply Chain
Exeter Finance Third-Party Breach (June 2023)
Primary Source βIncident Details
Capital One becomes latest bank affected by cyberattack on debt-buying giant. The initial response to the incident focused on former customers of Bank of America, but Capital One has confirmed that its customers also were involved. Capital One is the latest financial institution to reveal that it was affected by a cyberattack on NCB Management Services, a company that purchases debt. The initial response to the incident focused on former customers of Bank of America, but in new letters filed with regulators in several states, Capital One confirmed that its customers were involved. Third-party company: NCB Management Services, Inc..
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- NCB Management Services, Inc.
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2023-06-01 Breach occurred
- 2023-06-23 Publicly disclosed