NCB Management Services ncbi.com NCB Management Services data breach 2023: what happened
NCB Management Services, a debt buyer and collector, found on February 4, 2023 that an unauthorized party had accessed its systems on February 1. NCB told the Maine Attorney General on March 24, 2023 that 494,969 people were notified. Data included names, Social Security numbers and account details.
View all 13,115 breaches- Breach date
- Feb 2023
- Affected
- 494,969
- Data exposed
- Names, Dates of birth, Phone numbers, Physical addresses, Email addresses, Social security numbers, Driver's licenses, Credit cards
- Last updated
What happened
NCB Management Services, a debt buyer and accounts receivable company in Pennsylvania, discovered on February 4, 2023 that an unauthorized party had accessed its computer system on February 1. NCB confirmed that data had been taken on March 8 and filed a notice with the Maine Attorney General on March 24, 2023. Letters went to 494,969 people. The incident also appears on the California and Washington attorney general lists.
Later reporting put the number higher because some of NCB's business clients were affected too. TD Bank filed its own notice on May 12, 2023 after NCB told it about the incident, and Capital One customers were among those involved. Totals vary by outlet, so treat 494,969 as the figure in NCB's own first filing.
What was exposed
Reporting on the notices lists names, dates of birth, phone numbers, addresses, email addresses, employment details, Social Security numbers, driver's license numbers, credit card numbers, account balances and statuses, and routing numbers. Not everyone had every item. Your letter says which applied to you.
What it means for you
You may never have dealt with NCB: debt buyers and collectors hold records for people who borrowed from banks and card issuers. A Social Security number with a date of birth is enough to apply for credit in your name, so a credit freeze is the key step. Account details also help scammers pose as your bank.
The company's response
Reporting says a class action over the breach, Lindquist v. NCB Management Services, was filed on March 30, 2023 and later settled for $2.625 million. Check the settlement administrator's official site for terms and deadlines.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
A free freeze at Equifax, Experian and TransUnion blocks most new accounts in your name and is the first step when a Social Security number is involved.
- 2
Check card and bank statements
Account balances and card numbers were reported in the data. Watch for charges you don't recognise and ask your bank to replace a card if needed.
- 3
Treat calls about your accounts with caution
Scammers can quote real account details. Hang up and call the number on your card or statement.
- 4
Treat unexpected emails that mention the breach with suspicion
Criminals use breach details to make scam emails look real. Don't click links in a message you didn't expect. Go to the company's site by typing the address yourself.
- 5
Check whether your email or phone is in this and other breaches
Serus runs a free scan that checks breach databases for your email address and phone number, and Serus monitors the dark web and breach databases and alerts you when your details turn up again. Breach data can't be taken back once it has leaked, so the scan tells you what to change, not what to delete.
Frequently asked
Was I affected by the NCB Management Services breach?
NCB sent letters to 494,969 people according to its Maine filing, and other clients such as TD Bank notified their customers too. If you got a letter, you were included.
What was exposed in the NCB data breach?
Names, dates of birth, contact details, Social Security numbers, driver's license numbers, card numbers and account details, according to reporting on the notices. It varied by person.
Is there a settlement for the NCB breach?
Reporting says a class action settled for $2.625 million. Check the official settlement administrator for eligibility and deadlines.
Why was my data at NCB?
NCB buys and collects debts for lenders, so it holds records of people who had accounts with banks and card issuers.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
