HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENTMediumContained
NCB Management Services, Inc.
bd_529ce0cc20497bb2 · schema v1 · pii pii-v1
Full breach record for NCB Management Services, Inc. →NCB Management Services, Inc. reported unauthorized access to its systems on February 1, 2023, discovered on February 4, 2023. The incident potentially exposed personal and financial information of former Bank of America credit card customers, including names, addresses, SSNs, and account numbers. NCB engaged federal law enforcement and offered two years of identity theft protection via Experian.
California clockDiscovered Feb 4, 2023 → Notified Mar 24, 202348d ✓ CA 60-day OK7 weeks discovery → filing
This filing is one of 18 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_153c9cd6421b0283Oregon State AGfiled 2023-05-22(59d gap)Verified
- bd_46c7daa7a37aa471Montana State AGfiled 2023-05-22(59d gap)Verified
- bd_7e00d3aca7b39e63New Hampshire State AGfiled 2023-05-22(59d gap)Verified
- bd_84b3b575dbace3ecCalifornia State AGfiled 2023-05-22(59d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 96d gap
- bd_7d3222e6f53876beMaine State AGfiled 2023-05-23(60d gap)Verified
- bd_34294cfa92e78083New Hampshire State AGfiled 2023-05-26(63d gap)Verified
- bd_af43cc04b6170eccMontana State AGfiled 2023-05-26(63d gap)Verified
- bd_dc77d4029dd3d7c1Maine State AGfiled 2023-05-26(63d gap)Verified
- bd_a59e7f90661deffdDelaware State AGfiled 2023-06-16(84d gap)Verified
- bd_ebea091fe68ee688New Hampshire State AGfiled 2023-06-28(96d gap)Verified
Showing first 10 of 17 linked disclosures.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-564715
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 24, 2023
- Raw hash
- ac7fe199798360a54690a1aa129e68ac5b85fbc938cde6d2ca847b769ac813c2
Reporting entity
- Name
- NCB Management Services, Inc.norm: ncb management
Victim entity
- Name
- NCB Management Services, Inc.norm: ncb management
Incident
- Discovered
- Feb 4, 2023
- Materiality determined
- —
- Notification sent
- Mar 24, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- NCB is working with federal law enforcement authorities
Compliance
- Time to disclose
- 7 weeks(48 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 48d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 4, 2023→ Notified: Mar 24, 202348d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.