Credit Control Corporation
bd_584a0cb743b05831 · schema v1 · pii pii-v1
Full breach record for Credit Control Corporation →R&B Corporation of Virginia d/b/a Credit Control Corporation experienced a data security incident between March 2 and March 7, 2023. On March 7, 2023, the company detected unusual activity and isolated affected systems. An investigation determined that certain files containing account holder names were copied from the network. The company notified federal law enforcement, engaged forensic specialists, and implemented additional security measures and employee training. Affected individuals were offered one year of complimentary credit monitoring and identity protection services through Kroll.
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_bce0ff2432e1b80aOregon State AGfiled 2023-06-13Verified
- bd_f3f4d0615ad4803aMaine State AGfiled 2023-06-13Verified
- bd_5e0a9abf83df9e95Maine State AGfiled 2023-05-15(29d gap)Candidate
- bd_f684d6b2e6b21608Montana State AGfiled 2023-05-15(29d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 71d gap
- bd_0dd90a104410c5b0HHS OCRfiled 2023-05-13(31d gap)Verified
- bd_597c3a4221527b39Washington State AGfiled 2023-08-23(71d gap)Verified
- bd_e4194ca11e150fa4Maine State AGfiled 2023-08-23(71d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-567955
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 13, 2023
- Raw hash
- 83629aa965ee413fdf4ee022df426da9a66758caba8ac92c5149b440d7aaa9a3
Reporting entity
- Name
- Credit Control Corporationnorm: credit control
- Domain
- creditcontrol.net
Victim entity
- Name
- Credit Control Corporationnorm: credit control
- Domain
- creditcontrol.net
Incident
- Discovered
- Mar 7, 2023
- Materiality determined
- —
- Notification sent
- May 4, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 14 weeks(98 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 58d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 7, 2023→ Notified: May 4, 202358d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.