R&B Corporation of Virginia d/b/a Credit Control Corporation (“CCC”) is a vendor for certain healthcare and telecommunications service providers and is providing notice of a recent event at CCC that may affect the privacy of certain data CCC received from these entities. This notification provides information about the event, CCC’s response to it, and resources available to individuals to help protect their information, should they feel it necessary to do so.
On March 7, 2023, CCC became aware of unusual activity involving certain systems within its network. CCC promptly isolated the systems, and, with the assistance of third-party forensic specialists, commenced a comprehensive investigation into the nature and scope of the activity. On or about March 14, 2023, the investigation determined that certain files were copied from CCC’s network as part of a cyber incident between March 2, 2023 and March 7, 2023. CCC then undertook a thorough review of the files in order to identify what specific information was present in the files and to whom it related.
Although the review is ongoing, on or about May 3, 2023 the investigation determined that, at the time of the incident, the relevant files contained information including name, address, Social Security number, and information relating to the individual’s account(s) with CCC’s business partner(s) such as account number, account balance and date of service. The information varies by individual. On May 4, 2023, CCC began notifying its business partners and worked with them to notify individuals whose information was contained in the files.
CCC takes this event seriously and the security of information in its care. Upon learning of the unusual activity, CCC moved quickly to investigate and respond. The investigation included confirming the security of CCC’s network, reviewing the relevant files, notifying potentially affected business partners, and notifying federal law enforcement. CCC is also notifying individuals on behalf of our business partners and providing these individuals with an opportunity to enroll in complimentary credit monitoring and identity protection services.
In addition, CCC encourages individuals to remain vigilant by reviewing documents for suspicious activity, including account statements, explanation of benefits forms, and free credit reports. If patients find unfamiliar activity on an account statement or explanation of benefits form, they should notify the relevant provider immediately. If individuals see suspicious activity on their credit report, they should file a police report and may also contact the credit reporting bureaus.
Individuals with questions, including whether they are impacted by this event, may contact CCC’s dedicated assistance line at 1-866-347-3197, Monday through Friday from 9:00 am to 6:30 pm ET (excluding U.S. holidays). You may also write to Credit Control Corporation, attention: Privacy Dept., 11821 Rock Landing Drive, Newport News, VA 23606 or visit our website at www.creditcontrol.net and on riversideonline.com. There, you may also find information on the potentially impacted CCC’s business partners.