Debt collection agency Financial Business and Consumer Solutions (FBCS) now says over 3.2 million people have been impacted by a data breach that occurred in February.

FBCS is a nationally licensed debt collection agency in the U.S., specializing in collecting unpaid debts from consumer credit, healthcare, commercial, auto loans and leases, student loans, and utilities.

In late April, the firm reported that roughly 1.9 million people in the U.S. had sensitive personal information compromised in a data breach incident on February 14, 2024.

The information that unauthorized actors reportedly accessed includes: 

• Full name
• Social Security Number (SSN)
• Date of birth
• Account information
• Driver’s license number or ID card

The firm has now submitted a supplemental notice to the Office of the Maine AG, stating that the total number of persons affected is now 3,226,631 people, which adds over a million to the original figure.

New data breach notifications have been sent out to those people, starting on May 29, informing them of the heightened risks and the actions they need to take, albeit with a three-month delay.

Additionally, notice recipients will receive instructions on enrolling in a free 24-month credit monitoring and identity restoration service via CyEx.

People impacted by the incident are exposed to elevated risks by phishing, fraud, and social engineering attacks, so they’re advised to be cautious with their communications and monitor their bank accounts’ activity closely.

The firm assures customers that it is now using a separate environment built from the ground up with stronger security measures to prevent similar breaches in the future.

FBCS has not shared any details about the nature of the cybersecurity incident this time. Currently, no ransomware or data extortion groups have assumed responsibility for the attack.