Supply chain
β Supply Chain
TRG Medical Imaging Third-Party Breach (May 2025)
Primary Source βIncident Details
Nationwide Recovery Service Data Breach Victim List Grows: 560,000+ Individuals Affected. The list of victims from the data breach at the debt collection agency Nationwide Recovery Service (NRS) is steadily growing, with a further six NRS Six more National Recovery Service clients have confirmed that sensitive information was stolen in its July 2024 cyberattack: The City of Chattanooga, MAK Anesthesia, Duncan Regional Hospital, Swedish Edmonds Hospital, Smile Solutions of Goodlettsville, and UCM Medical Group. Third-party company: Nationwide Recovery Services (NRS).
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Nationwide Recovery Services (NRS)
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2025-05-01 Breach occurred
- 2025-05-27 Publicly disclosed