Debt collection agency Financial Business and Consumer Solutions (FBCS) now says that the personal information of roughly 2.7 million individuals was compromised in a recently disclosed data breach.
In a May 10 update to a filing with the Maine Attorney General’s Office, FBCS revealed that it has identified an additional 724,000 affected individuals, increasing the initial impact estimation to 2,679,555 people.
As part of the incident, a third-party had unauthorized access to certain systems between February 14 and February 26, 2024, the company explains in a notification letter to the impacted individuals.
“FBCS learned that certain information provided by customer organizations related to individuals may have been accessed or exfiltrated during the incident,” reads a copy of the notification letter submitted to the Maine AGO.
According to the notification letter, the compromised personal information includes names, dates of birth, Social Security numbers, and account information.
However, the debt collector informed the Maine AGO that driver’s license numbers and non-driver identification card numbers might have been compromised as well.
FBCS says it secured the impacted systems immediately after identifying the incident in late February, and that it started notifying the impacted individuals with assistance from its clients, which were notified of the incident starting early April.
The debt collector is offering 12 months of free credit monitoring services to the impacted individuals.
A third-party collection agency, Financial Business and Consumer Solutions collects commercial and consumer debts, mainly focusing on recovering consumer debts on behalf of creditors.
Related: University System of Georgia Says 800,000 Impacted by MOVEit Hack
Related: Kaiser Permanente Data Breach Impacts 13.4 Million Patients
Related: UnitedHealth CEO Says Hackers Lurked in Network for Nine Days Before Ransomware Strike
Related: Ransomware Gang Leaks Data Allegedly Stolen From Government Contractor