210,140 Americans Warned As Major Data Breach Disclosed – Stolen Names, Social Security Numbers and Financial Records Identified

A major cybersecurity incident affecting the sensitive personal and financial information of hundreds of thousands of Americans has been revealed.

In a new filing with the Office of the Maine Attorney General, Georgia-based healthcare firm Harbin Clinic says it discovered a serious breach affecting 210,140 people.

The firm says an unknown attacker gained unauthorized access to the database of its third-party vendor, Nationwide Recovery Services (NRS), stealing customer records, including names, addresses, Social Security numbers, dates of birth and financial account records.

The Harbin Clinic says it uses NRS for a debt collection service to recover funds from customers with delinquent accounts.

“It is our understanding that, in July 2024, NRS discovered suspicious activity related to its information technology systems, which resulted in a network outage. NRS indicated that it determined through an investigation that there was unauthorized access to the NRS network between July 5th, 2024 and July 11th, 2024, during which time certain files and folders were illegally copied from NRS’s systems by someone without authorization. NRS reported it [and] began a lengthy review to determine what information was contained on the impacted NRS systems and which NRS clients were impacted.

As a result of this review, NRS notified Harbin Clinic in February 2025 that information from Harbin Clinic’s patients may have been present on the impacted systems, but it was not yet able to identify which individuals had been impacted.” 

Harbin Clinic is a multi-specialty medical group offering a wide array of services, such as family medicine, internal medicine, oncology and cardiology.

The firm says it immediately sent letters of notification to affected customers to inform them about the data breach, while offering free identity monitoring services to affected individuals.

Harbin Clinic says it has not yet detected any instance involving the misuse of customer data. The firm is also urging customers to stay vigilant and report any suspicious activity related to their financial accounts.

Generated Image: Midjourney