Dozens of healthcare providers affected by Virginia debt collector breach

Social Security numbers (SSNs) of over 300,000 US residents have been exposed in a breach that occurred at R&B Corporation of Virginia, also known as Credit Control Corporation.

R&B Corporation of Virginia, a debt collection service provider, first disclosed the breach to the Maine Attorney General in mid-May. It first noticed “unusual activity” on its networks on March 7th.

Certain files that were copied from the company’s systems by an unauthorized party contained personal information, such as name and SSN. In an additional breach notification document submitted to the Maine Attorney General on June 13th, the company added that some driver’s license numbers were also exposed.

R&B Corporation of Virginia say that the incident affected 286,699 people in total. The sensitive data belongs to numerous US health institutions.

Healthcare providers known to be affected by the breach:

• Atlantic Orthopaedic Specialists

• Chesapeake Radiology

• Children's Specialty Group

• Dominion Pathology Laboratory

• Emergency Physicians Of Tidewater

• Mary Washington Healthcare

• Medical Center Radiology

• Riverside Health System

• Sentara Health System

• Valley Health System

However, according to yet another filing, this time with the US department of Health and Human services, the breach in fact impacted 345,523 individuals, and the list of affected healthcare providers is twice as long.