NCB Management Services says data breach impacted more than 1 million customers

 

The incident compromised customers’ personal details such as their full names, addresses, phone numbers, email addresses, dates of birth, employment position, pay amount, driver’s license numbers, Social Security numbers, account numbers, credit card numbers, routing numbers, account balance, and/or account status.

“According to our records, the information potentially accessed in this NCB incident was related to a credit card account. This impacted credit card account had already been closed,” NCB explained.

In a previous filing with the office of Maine’s Attorney General, NCB Management disclosed that the data breach had affected 494,969 individuals. The company added in a fresh filing that the threat actors were inside its internal network between February 1, 2023, and February 6, 2023 and the unauthorised access was detected on February 4.

NCB Management also revised the number of affected individuals, stating that at least 1,087,842 people were affected by the security incident. The company has started notifying all affected customers since May 19.

“We are notifying you so you can protect your personal and account information. After detecting unusual activity, we took immediate steps to identify and contain the intrusion and eliminate the unauthorised activity on NCB’s systems.

“We have implemented a number of additional security measures to harden our network and increase our ability to monitor and detect any threats. We are also conducting additional training of our workforce on data security.

“NCB has notified and is cooperating with federal law enforcement authorities,” reads the letter sent to affected individuals.

NCB Management is providing all affected individuals with two years of complimentary identity monitoring service through Kroll that includes credit monitoring, $1 million identity fraud loss reimbursement, fraud consultation, and identity theft restoration.