HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountHealth (basic)MediumContained

Retrieval Masters Creditors Bureau, Inc.

bd_a8b878c5d7e73921 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 20, 2019

Filed

Jun 7, 2019

To disclose

11 weeks

Affected

94,643state residents only

Linked

6 filings

Confidence

64%

Full breach record for Retrieval Masters Creditors Bureau, Inc. →

Retrieval-Masters Creditors Bureau, Inc (d/b/a American Medical Collection Agency) notified affected individuals of a data breach where an unauthorized user accessed the system between August 1, 2018, and March 30, 2019. Compromised data included names, credit card numbers, and medical information. The company took down its web payment page, engaged forensic consultants, notified law enforcement, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due11 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 231 days

discovery → filing · 11 weeks / 79 days

Aug 1, 2018

Begins

Mar 20, 2019

Discovered

Jun 7, 2019

Filed

vs. sector median

+3 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Oregon State AGbd_94d9585c5291c2542019-06-05 · +2dVerified
Massachusetts State AGbd_68a49144078bbdc82019-06-04 · +3dVerified
New Hampshire State AGbd_ce94309f6c3f54d82019-06-04 · +3dVerified
Washington State AGbd_5843afa3eefcd6c02019-06-03 · +4dCandidate

Show 1 more filing ↓up to 4d gap

Montana State AGbd_9e37a672fe0e40c62019-06-03 · +4dVerified

Name: Retrieval Masters Creditors Bureau, Inc.
norm: retrieval masters creditors bureau

Name: Retrieval Masters Creditors Bureau, Inc.
norm: retrieval masters creditors bureau
Industry: Financial Servicesllm

Discovered: Mar 20, 2019
Breach occurred: Aug 1, 2018 – Mar 30, 2019
Undetected for: 231 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 4, 2019
Affected individuals: 94,643state-resident count only
Data types: Identity (basic)Financial accountHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Took down web payments page
Migrated web payments page to a third party vendor
Retained a computer security consulting firm to advise on, and implement, steps to increase systems’ security
Advised law enforcement of this incident
Changes made: Provided 24 months of complimentary credit monitoring and identity theft mitigation services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(79 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Washington State AGJun 3 · first

Montana State AGJun 3 · first

Massachusetts State AG+1d

New Hampshire State AG+1d

Oregon State AG+2d

South Carolina State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2019/RetrievalMastersCreditBureauInc.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 7, 2019
Raw hash: 7c8daf5815ad62b5018bf1b8512cd77288f4465f1b954db7c1cce42b8b9b2395

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityRetrieval Masters Creditors Bureau, Inc.

Victim entityRetrieval Masters Creditors Bureau, Inc.

Incidentdiscovered Mar 20, 2019

Stated responseTook down web payments page

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov