Supply chain β›“ Supply Chain

CF Medical Third-Party Breach (October 2024)

πŸ“… 2024-10-01 🏒 Financial Business and Consumer Solutions (FBCS)
Primary Source β†—

Incident Details

Comcast says customer data stolen in ransomware attack on debt collection agency | TechCrunch. The ransomware attack on a U.S. debt collection agency also affects customers of CF Medical and Truist Bank. U.S. telecom giant Comcast has warned that cybercriminals stole the personal data of more than 230,000 customers during a ransomware attack on a third-party provider of debt collection services. The breach relates to a February cyberattack on Financial Business and Consumer Solutions (FBCS), a Pennsylvania-based debt collection agency used by Comcast. Third-party company: Financial Business and Consumer Solutions (FBCS).

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Financial Business and Consumer Solutions (FBCS)
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2024-10-01 Breach occurred
  2. 2024-10-07 Publicly disclosed