On May 26, 2023, Capital One filed a notice of data breach with the Attorney General of Maine after learning that a cybersecurity incident at NCB Management Services, Inc. (“NCB”) resulted in confidential Capital One customer data being compromised. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names, addresses, Social Security numbers, account numbers, and account status. After confirming that consumer data was leaked, Capital One began sending out data breach notification letters to all 16,779 individuals who were impacted by the recent data security incident.

If you received a data breach notification from Capital One or NCB Management Services, Inc., it is essential you understand what is at risk and what you can do about it. Because this is a third-party data breach, it means that Capital One’s systems were not breached. However, as a vendor of Capital One, NCB Management Services still owes Capital One customers the same duty to protect their sensitive information. To learn more about how to protect yourself from becoming a victim of fraud or identity theft and what your legal options are in the wake of the Capital One data breach, please see our recent piece on the topic here.

What We Know So Far About the Capital One Breach

News of the Capital One data breach is still fresh; however, what we know at this point comes from the company’s filing with the Attorney General of Maine. According to this source, on February 4, 2023, NCB learned that an unauthorized party had accessed the company’s computer system three days earlier, on February 1, 2023. In response, NCB launched an investigation into the incident in hopes of learning what, if any, consumer information was impacted and who the information belonged to.

In April 2023, the NCB investigation confirmed that an unauthorized party was able to access certain files on the company’s network. NCB also determined that some of the accessible files contained confidential consumer information belonging to Capital One customers.

Upon discovering that sensitive consumer data was made available to an unauthorized party, NCB and Capital One began to review the affected files to determine what information was compromised and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, address, Social Security number, account number, and account status.

On May 26, 2023, Capital One sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.

More Information About Capital One and NCB Management Systems, Inc.

Capital One is a large financial holding corporation based in McLean, Virginia. The company operates Capital One Bank, National Association; and Capital One, National Association, both of which are banks with offices across the United States and the United Kingdom. Capital One employs more than 55,000 people and generates approximately $34 billion in annual revenue.

Founded in 1994, NCB Management Services, Inc. is a debt collection company based in Trevose, Pennsylvania. NCB Management Services provides corporate clients with Accounts Receivable Management and Call Center Management solutions designed to decrease the company’s clients’ outstanding accounts receivable. NCB also purchases some debt directly from other companies. NCB Management Services employs more than 375 people and generates approximately $50 million in annual revenue.