HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICCREDENTIALSLowContained
Nationwide Recovery Services, Inc.
bd_c4fee33645d310a0 · schema v1 · pii pii-v1
Full breach record for Nationwide Recovery Services, Inc. →Shore Medical Center notified consumers that Nationwide Recovery Services, Inc. (NRS), a former debt collection vendor, experienced unauthorized access to its network between July 5-11, 2024. The incident involved copying of files containing personal information. Shore Medical Center offered one year of Experian IdentityWorks to affected individuals.
Vermont clock✗ VT AG >45 bday45 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_fc5e851b479bd88eVermont State AGfiled 2025-05-21(2d gap)Verified
- bd_16344af9ac358a81California State AGfiled 2025-06-06(14d gap)Candidate
- bd_4063c2b887187bd4Vermont State AGfiled 2025-06-06(14d gap)Verified
- bd_f716fd72481985a8New Hampshire State AGfiled 2025-06-06(14d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-05-23-shore-medical-center-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 23, 2025
- Raw hash
- 449830f8caa69ba9a54384fb2373d847f6f2e9c74bacb664db122584d14b4975
Reporting entity
- Name
- Shore Medical Centernorm: shore medical center
Victim entity
- Name
- Nationwide Recovery Services, Inc.norm: nationwide recovery
Incident
- Discovered
- Jul 11, 2024
- Materiality determined
- —
- Notification sent
- Mar 26, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- reported this incident to law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 45 weeks(316 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.