HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained

Self Regional Healthcare

bd_94d0fa22f3728881 · schema v1 · pii pii-v1

Full breach record for Self Regional Healthcare →

Self Regional Healthcare (SRH) notified affected individuals that Nationwide Recovery Services (NRS), a former debt collection vendor, experienced unauthorized access to its network in July 2024. Files containing patient data from 2012-2013 were copied. Data exposed includes names, DOBs, SSNs, diagnoses, and medical info. NRS discovered the breach on July 11, 2024. SRH is offering 12 months of IDX identity protection.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

bd_8aeb1a0e39b89683HHS OCRfiled 2025-07-17Verified

Source provenance

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2025/SRH%20-%20South%20Carolina%20-%20Consumer%20Letter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 17, 2025
Raw hash: df50d2c5c00c33d4b5d33043fa41254e57704a8d188f9c366784b592cfd2ab54

Reporting entity

Name: Nationwide Recovery Services, Inc.
norm: nationwide recovery

Victim entity

Name: Self Regional Healthcare
norm: self regional healthcare

Incident

Discovered: Jul 11, 2024
Materiality determined: —
Notification sent: Jul 17, 2025
Affected individuals: Not disclosed
Data types: IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Initial access: valid_credentials

Compliance

Time to disclose: 12 months(371 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.