R&B Corporation of Virginia

Disclosed May 13, 2023607,787 affectedConfirmed

The covered entity (CE), R&B Corporation of Virginia dba Credit Control Corporation, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 607,787 individuals. The PHI involved included names, Social Security numbers, addresses, and claims and financial information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards. Staff were retrained.

What is known

People affected	607,787 (as reported to HHS)
Disclosed	May 13, 2023
Discovered	Mar 7, 2023
Happened	Mar 2, 2023
Attack	Ransomware
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: R&B Corporation of Virginia

Official noticeatg.wa.gov

Washington Attorney General breach notice: R&B Corporation of Virginia

Official noticeago.vermont.gov

Vermont Attorney General: 2023-08-23 R&B Corporation of Virginia dba Credit Control Corporation Data Breach Notice to Consumers

Official noticein.gov

Indiana Attorney General 2023 data breach report: R&B Corporation of Virginia

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): R&B Corporation of Virginia (Business Associate, VA)

Notices filed

TotalMay 13, 2023

HHS archive607,787 people

Residents of INMay 15, 2023

Indiana AG20,810 people

Residents of CAJun 13, 2023

California AGCount not stated

Residents of WAAug 23, 2023

Washington AG1,564 people

Residents of VTAug 23, 2023

Vermont AGCount not stated

History of this record

sector2026-09-25

other to healthby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

organization to hhsby backfillSource

records2026-09-25

286699 to 607787by backfillSource

disclosed2026-09-25

2023-05-15 to 2023-05-13by backfillSource

summary2026-09-25

empty to The covered entity (CE), R&B Corporation of Virginia dba Credit Control Corporation, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 607,787 individuals. The PHI involved included namesby backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 286699by backfillSource

disclosed2026-09-25

2023-06-13 to 2023-05-15by backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2023-08-23-rb-corporation-virginia-dba-credit-control-corporation-data-breach-notice-consumersby backfillSource

attack2026-09-25

unknown to ransomwareby backfillSource

discovered2026-09-25

empty to 2023-03-07by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about R&B Corporation of Virginia