Financial Business and Consumer Solutions, Inc. (FBCS), a US-based debt collection agency, reported a substantial data breach impacting approximately 1,953,385 individuals.
Financial Business and Consumer Solutions, Inc. (FBCS) is a debt collection agency that provides various services primarily centered around debt recovery. The company operates by handling and processing personal information received from its client organizations to collect debts on their behalf.
The breach was discovered on February 26, 2024, after occurring between February 14 and February 26, 2024, and involved unauthorized access to FBCS's network. However, the firm clarified that the incident did not affect external systems, including those of its clients.
The breach, which affects almost two million people nationwide according to the related report on the Maine Attorney General's Office, exposed the following sensitive personal data:
- Full names
- Driver's license numbers
- Identification card number
- Social Security Numbers (SSNs)
- Dates of Birth
- Account information (numbers, status, debt figures, etc.)
The above data can be used by threat actors in phishing, scamming, identity theft, and social engineering attacks, among other things. FBCS stated that it has not seen any signs of the data having been misused though.
Starting on April 26, 2024, FBCS has been sending written notifications to affected individuals, including detailed information about the breach and steps for protection. FBCS is also offering 12 months of free credit monitoring through Cyex, covering features like credit score tracking, real-time alerts, and identity theft insurance.
Individuals are urged to monitor their financial statements and credit reports for any unusual activity.
Consumers can place fraud alerts or credit freezes on their files to help prevent fraudulent activities in their names.
For ongoing updates and more information about the security incident, affected and potentially affected individuals can reach out to FBCS through their dedicated support channels.
Health Retailer Piping Rock Suffers Data Breach Impacting 2.1M
Only Customer files we’re hacked? not employee files?
Hi Colleen, from my reading of the report, that is correct, I do not see any mention of employee files, but rather, clients/customers.
“Starting on April 4, 2024, FBCS began providing notice of this incident to potentially impacted clients, and as the investigation and review of the data continued, reported to its clients what specific data of theirs was impacted.”