Debt Collector Data Breach Affects 200,000 Harbin Clinic Patients

[ck4829]

A third-party data breach has compromised personal information belonging to more than 200,000 Harbin Clinic patients.

The breach stems from a cyber-attack in July 2024 targeting Nationwide Recovery Services (NRS), a debt collection agency contracted by the Georgia-based healthcare provider. The incident came to light following unusual activity on NRS systems, which led to a network outage.

Investigations revealed that threat actors accessed the NRS network between July 5 and July 11, during which they extracted sensitive data.

In February 2025, NRS – owned by ACCSCIENT – formally notified Harbin Clinic that patient data had been impacted. A detailed list of affected individuals was shared in March.

https://www.infosecurity-magazine.com/news/debt-collector-breach-affects/

A "medical debt collector data breach" is a thing that for some reason primarily affects the "world's greatest healthcare system", kinda odd if you ask me.