HackingData ExfiltratedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Credit Control Corporation
bd_c8cd0b626c1f7bc5 · schema v1 · pii pii-v1
Full breach record for Credit Control Corporation →R&B Corporation of Virginia (dba Credit Control Corporation) notified consumers of a data security incident occurring March 2-7, 2023. Unusual activity led to the copying of files containing account holder names and data elements. No evidence confirmed data theft, but it cannot be ruled out. The company engaged forensic specialists, notified law enforcement, and offered one year of credit monitoring via Kroll.
Vermont clock✗ VT AG >45 bday24 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_1e2e76cdb86a6294New Hampshire State AGfiled 2023-08-23Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-08-23-rb-corporation-virginia-dba-credit-control-corporation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 23, 2023
- Raw hash
- 7cc7ef124ebfbd687d3189ad4f3a9c6cedbe80e8332d531637639b4c4132593b
Reporting entity
- Name
- Credit Control Corporationnorm: credit control
- Domain
- creditcontrol.net
Victim entity
- Name
- Credit Control Corporationnorm: credit control
- Domain
- creditcontrol.net
Incident
- Discovered
- Mar 7, 2023
- Materiality determined
- —
- Notification sent
- May 4, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 24 weeks(169 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.