Debt-collection company data breach affects 500K people with past-due Bank of America accounts

Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.

Debt collection data breach overview:

• Who: Nearly 500,000 consumers with past due Bank of America accounts may have been affected by a debt-collection company data breach.
• Why: An unauthorized party reportedly gained access to confidential information maintained by debt collection agency NCB Management Services, which maintained records for Bank of America customers with past due accounts.
• Where: The debt collection data breach may affect Bank of America accounts throughout the United States.
• What are my options: Norton provides antivirus protection against advanced online threats.

Customers with past due Bank of America accounts may have had their confidential client information accessed by an unauthorized third party due to a debt collection data breach, Law360 reports.

A sample notice states an unauthorized party gained access to confidential client information maintained by NCB Management Services, a national debt collection agency. The data breach was reportedly discovered Feb. 4 and potentially affects about 500,000 consumers with past-due Bank of America accounts.

NCB says it confirmed March 8 that Bank of America accounts were affected by the breach.

The impacted Bank of America credit card accounts have already been closed, the notice states. 

“The unauthorized activity on NCB’s systems has been stopped, and NCB has obtained assurances that the third party no longer has any of the information on its systems,” according to the sample notice.

The information accessed in the debt collection data breach may include names, addresses, phone numbers, email addresses, birthdates, driver’s license numbers, Social Security numbers, credit card numbers, routing numbers and account balances. 

“We are not aware of any use or distribution of the potentially accessed information,” the sample notice states.

Bank of America says its systems were not affected by the debt collection data breach.

NCB is reportedly working with federal law enforcement authorities.

Consumers with affected Bank of America accounts are reportedly eligible for free identity theft protection

Consumers with Bank of America accounts affected by the data breach will be eligible for a free two-year membership to Experian IdentityWorks, an identity theft protection service.

Additionally, the bank recommends that those affected promptly review their credit reports and account statements over the next 12 to 24 months and notify their financial institution about any unauthorized transactions or suspected identity theft incidents.

Consumers who believe they are a victim of fraud or identity theft can contact Equifax, Experian and/or TransUnion to place a fraud alert on their account and prevent new accounts from being opened without the customer’s authorization. Consumers also can report any incidents of identity theft to the Federal Trade Commission.

Bank of America was recently hit with a class action lawsuit alleging a Zelle glitch caused consumers “immense hardship.”

Were you affected by the debt collection data breach? Tell us about it in the comments!

Read About More Class Action Lawsuits & Class Action Settlements:

• Class action lawsuit alleges Bank of America made Zelle withdrawals without authorization
• Bank of America class action alleges bank misleadingly marketed PPP loans to small businesses
• Consumers file Bank of America lawsuits over PPP loans, Zelle
• Bank of America class action claims company improperly handled CARES Act forbearances