Comcast Cable Communications and Truist Financial institution have disclosed they had been impacted by a knowledge breach at FBCS, and are actually informing their respective prospects that their information has been compromised.
The case issues a knowledge breach at Monetary Enterprise and Shopper Options (FBCS), a debt assortment company within the U.S. that companions with varied firms to gather unpaid money owed on their behalf.
Final April this yr, FBCS knowledgeable of a knowledge breach decided to have occurred between February 14 and February 26, 2024, when menace actors breached its community and stole the next particulars from its digital data:
- Full identify
- Social Safety Quantity (SSN)
- Date of beginning
- Account info
- Driver’s license quantity or ID card
The information breach was initially believed to have impacted 1.9 million folks, however subsequent findings upped the tally to three.2 million in June and, lastly, 4.2 million people in July.
The inner investigation into the incident seems to be ongoing, as FBCS just lately knowledgeable extra entities that that they had been impacted, together with Comcast and Truist.
Additionally, it’s now made identified that resulting from FBCS’s worsening monetary place, presumably a direct results of the breach, entities not directly impacted by the incident must undertake the notification and remediation processes themselves.
Comcast information uncovered
Comcast says FBCS assured them in March that the safety incident impacted no buyer information. Nevertheless, on July 17, FBCS notified Comcast that its buyer information was additionally impacted.
Based on a discover submitted to the Maine authorities, 273,703Â Comcast prospects had been impacted by the breach.
“FBCS’s investigation discovered that files downloaded by the unauthorized party included your name, address, Social Security number, date of birth, and your Comcast account number and ID numbers used internally at FBCS,” reads the notification despatched to impacted prospects.
“FBCS states that it has no indication that any personal information compromised during this incident has been further misused.”
Impacted folks got 12 months of free-of-charge identification theft safety companies, with activation directions enclosed.
Truist Financial institution additionally impacted
In associated information, Truist Financial institution, one of many largest banks in the USA, additionally despatched notices of a knowledge breach to its prospects linked to the FBCS incident.
The letters had been despatched out in mid-September, however a pattern was submitted extra just lately to the Californian authorities.
“FBCS has indicated that the type of information that may have been impacted varies per person and may include consumer name, address, account number, date of birth and Social Security number,” disclosed Belief Financial institution.
Truist operates over 2,700 branches throughout 15 states and employs 40,000 folks. As such, the variety of impacted folks may very well be vital, although it has not been specified.
BleepingComputer emailed Truist to be taught what number of of its prospects had been impacted by this incident, however a remark wasn’t instantly out there.
In the meantime, final June, Truist Financial institution confirmed a separate breach that reportedly occurred in October 2023 after a menace actor leaked stolen information on a hacking discussion board.