Next Level Finance Partners, also known as Century Support Services, a Pennsylvania-based debt settlement company, has disclosed a data breach. The company has started sending out notifications to the more than 160,000 affected individuals.
According to the notification letter, the company systems were hacked in November 2024. An investigation started after the attack revealed in May 2025, that hackers may have accessed or stolen files containing personal information. The stolen data can vary from person to person, but overall it includes:
- Names and birthdays
- Social Security numbers
- Driver’s license numbers
- State ID numbers
- Passport numbers
- Medical and health insurance information
- Financial account information
- Digital signatures
The company’s website claims it has worked with nearly 300,000 clients. This brings the number of affected individuals to over half of its client base at 160,759.
At the time of writing, the company claims there’s no evidence of any identity theft or financial fraud related to the incident. However, out of an “abundance of caution,” it’s providing affected customers 12 months of free identity theft protection and credit monitoring services.
Technical details on the attack weren’t shared in the notification letter. All it claimed was that an “unauthorised party” gained access to their computer systems. Cybersecurity experts were brought in to investigate the breach shortly after its detection on November 7, 2024.
That said, the attack bears all the hallmarks of a ransomware attack, especially considering the vast amount of data stolen. Candid.Technology hasn’t seen data related to the breach being sold or offered on dark web hacking forums, and no major ransomware group has taken credit for the attack at the time of writing either.
In the News: Vulnerability in Gigabyte firmware lets hackers disable secure boot
