Supply chain
β Supply Chain
CF Medical Third-Party Breach (October 2024)
Primary Source βIncident Details
Comcast says customer data stolen in ransomware attack on debt collection agency | TechCrunch. The ransomware attack on a U.S. debt collection agency also affects customers of CF Medical and Truist Bank. U.S. telecom giant Comcast has warned that cybercriminals stole the personal data of more than 230,000 customers during a ransomware attack on a third-party provider of debt collection services. The breach relates to a February cyberattack on Financial Business and Consumer Solutions (FBCS), a Pennsylvania-based debt collection agency used by Comcast. Third-party company: Financial Business and Consumer Solutions (FBCS).
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Financial Business and Consumer Solutions (FBCS)
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2024-10-01 Breach occurred
- 2024-10-07 Publicly disclosed