Debt collection services company Credit Control Corporation (CCC) has experienced a significant data breach that potentially compromised the personal information of 286,699 individuals, including sensitive data such as names, addresses, Social Security numbers, and account details.
The breach occurred between March 2nd and March 7th, and healthcare institutions relying on CCC’s services, including prominent organizations like VCU Health System and UVA Health System, are among the affected parties. CCC swiftly responded by isolating compromised systems, launching an investigation, and notifying federal law enforcement agencies.
The breach notification notice published by the Office of the Maine Attorney General revealed that out of the affected individuals, 20 residents of Maine were specifically identified.
The stolen data varied for each individual, encompassing personally identifiable information and account details with CCC’s business partners, potentially exposing affected individuals to identity theft and fraudulent activities. CCC has taken steps to mitigate the impact by offering free credit monitoring and identity theft protection services for a year.
CCC urges affected individuals to exercise vigilance by reviewing their account statements and explanation of benefits forms, monitoring free credit reports for suspicious activities, and promptly reporting any errors or fraudulent incidents detected.
The company remains fully cooperative with the ongoing investigation conducted by federal law enforcement agencies. This incident highlights the importance of robust cybersecurity measures and the need for organizations to prioritize the protection of sensitive personal information to safeguard individuals’ privacy and prevent potential harm.