HackingHealthcareFinancial ServicesHealthcareStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)Identity (basic)Government IDFinancial accountHealth (basic)MediumContained

TSG Enterprises, LLC

bd_c8ce5ede9daa4c73 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 31, 2025

Filed

Jun 18, 2025

To disclose

11 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for TSG Enterprises, LLC →2 incidents on file

TRG, LLC reported a data security incident involving its third-party vendor, Nationwide Recovery Services, Inc. An unauthorized party accessed Nationwide's network between July 5-11, 2024, exfiltrating patient data including names, SSNs, DOBs, account balances, and medical info. TRG, a medical imaging debt collector, notified affected individuals on June 16, 2025, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 269 days

discovery → filing · 11 weeks / 79 days

Jul 5, 2024

Begins

Mar 31, 2025

Discovered

Jun 18, 2025

Filed

vs. sector median

+2 wks slower

Part of Nationwide Recovery Services, Inc. supply-chain incident (2025) — a supply-chain cascade affecting multiple organizations.View cascade →

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: TRG, LLC
norm: trg

Name: TSG Enterprises, LLC
norm: tsg enterprises
Industry: HealthcarellmFinancial Servicesllm

Discovered: Mar 31, 2025
Breach occurred: Jul 5, 2024 – Jul 11, 2024
Undetected for: 269 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 16, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General of the State of New JerseyNotified Attorney General of the State of New Hampshire
Third party: via Nationwide Recovery Services, Inc.
Initial access: valid_credentials

During the incident: Notifying involved individuals of the incident via letters
Offering twelve (12) months of complimentary credit monitoring services
Reviewing its relationship with Nationwide
Evaluating options for alternative debt collection service providers
Changes made: Reviewing its relationship with Nationwide
Evaluating options for alternative debt collection service providers
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(79 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/trg-nationwide-recovery-services-20250618.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 18, 2025
Raw hash: a1666a51c207aa75b295ae9e011b3580ea495ab6fab8632b61993d6efcfac886

Reporting entityTRG, LLC

Victim entityTSG Enterprises, LLC

Incidentdiscovered Mar 31, 2025

Stated responseNotifying involved individuals of the incident via letters

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov