If Nationwide Recovery Service (NRS) has appeared on your credit report, a 2024 data breach is the first thing to check. NRS suffered a ransomware attack that has grown to affect over 516,000 individuals across dozens of healthcare clients.
If you are a current or former patient of any NRS healthcare client and your personal information was exposed, you may have received a breach notification. That breach is also generating multiple federal class action lawsuits. This guide covers who NRS is, what the breach means for you, and how to respond to any collection account.
Who Is Nationwide Recovery Service?
Nationwide Recovery Service, Inc. (NRS) is a debt collection agency founded in 1946 and headquartered in Cleveland, Tennessee, with a corporate office in Norcross, Georgia. The company is a subsidiary of Accscient LLC.
NRS may appear on your credit report or correspondence under several names: Nationwide Recovery Services, Nationwide Recovery Systems Ltd., NATIONWD REC, or Nationwide Recovery Sv. All refer to the same Cleveland, Tennessee organization.
NRS operates as both an early-out collection service and a bad debt collector. Early-out means they contact consumers within days or weeks of a missed payment, not just after charge-off. They also purchase charged-off debt portfolios outright.
Not sure where to start with your credit?
Answer a few simple questions and get a free step-by-step plan to rebuild your credit.
The 2024 Data Breach
In 2024, NRS suffered a ransomware attack that has grown to affect over 516,000 individuals. The breach exposed personal and health information held by NRS on behalf of their healthcare clients.
Confirmed affected clients include Harbin Clinic in Georgia (210,140 patients), Vitruvian Health/Hamilton Health Care in Texas (approximately 90,000 patients), Northeast Georgia Health System (21,000 patients), Rhea Medical Center in Tennessee, Smile Solutions in Goodlettsville Tennessee, Providence Swedish in Washington State, Erlanger in North Carolina, and the City of Chattanooga, Tennessee.
Multiple federal class action lawsuits allege NRS was negligent in failing to protect patient data. If you received a breach notification from NRS or any of these healthcare providers, monitor your credit reports and financial accounts closely for signs of identity theft.
Why NRS Is on Your Credit Report
NRS collects across several industries. Confirmed client categories include:
- Healthcare providers: Hospitals, clinics, physical therapy practices, and dental offices. KORT physical therapy is a confirmed client from a documented BBB review. EMS services are also confirmed from BBB complaints.
- Auto lenders: Documented in a BBB review involving car debt.
- Utilities and telecommunications: Cable, internet, and utility service balances.
- Personal loans: Consumer financing balances.
If NRS is contacting you about a healthcare account and the provider appears on the data breach list above, confirm whether your account was affected by the breach before engaging on the balance.
Identity Theft Accounts
Multiple BBB complaints document consumers discovering NRS accounts on their credit reports that they believe trace to identity theft. Several complaints include police reports and FTC identity theft affidavits. NRS’s documented BBB response pattern is to put the account in dispute status and request validation from the original creditor.
If NRS is reporting an account you did not open, submit a police report and FTC identity theft affidavit to NRS by certified mail and dispute the credit report entry with all three bureaus simultaneously.
Difficulty Reaching NRS by Phone
Multiple documented BBB reviews describe consumers waiting on hold for hours without reaching a representative, even when calling right when NRS opens. NRS’s website has also been described as under construction in recent reviews.
Given these documented phone access issues, written communication by certified mail is especially important with NRS. Do not rely on phone calls to resolve disputes, make payment arrangements, or confirm account status.
What NRS Cannot Do Under Federal Law
The FDCPA applies to Nationwide Recovery Service. Under federal law, they cannot:
- Report identity theft accounts without investigating the dispute: A documented multiple-BBB-complaint pattern.
- Threaten lawsuits or arrest: NRS is unlikely to sue except on very large balances, and threats of arrest are never legally permitted.
- Call outside permitted hours: Contact is only allowed between 8 a.m. and 9 p.m. in your time zone.
- Fail to respond to validation requests within 30 days: Required under the FDCPA.
- Use harassing or abusive language: Documented in consumer complaints.
File complaints at consumerfinance.gov. Tennessee residents can file with the Tennessee Attorney General’s Consumer Affairs Division. Georgia residents can file with the Georgia Department of Law’s Consumer Protection Division.
Medical Debt Reporting Rules Apply
Because NRS focuses heavily on healthcare, specific credit reporting protections apply. Medical debts under $500 are not reported, paid medical collections are removed, and unpaid medical debt has a one-year waiting period before reporting.
If your account falls under any of these categories, dispute it immediately with each credit bureau.
Verify Insurance Before Paying Anything
Pull your explanation of benefits for the relevant service dates. Confirm the claim was submitted to your insurer and properly adjudicated before paying any NRS medical balance.
Send a written debt validation request by certified mail within 30 days of first contact. Ask for the original creditor, the dates of service, an itemized bill, and confirmation that all insurance was properly billed.
How to Check Your Credit Report for NRS Errors
Pull your credit reports from all three bureaus at AnnualCreditReport.com. Search under all NRS name variations. Is the original creditor identified? Is the balance correct? Was prior notice provided before the account appeared?
Any inaccuracy, including an account you did not open, is grounds for a dispute with each credit bureau.
How Long Can NRS Legally Pursue the Debt?
Tennessee has a 6-year statute of limitations on most consumer debts. Georgia, where the corporate office is located, also has a 6-year limit. The relevant state for any lawsuit is typically where you currently reside.
Your Options for Resolving an NRS Account
Once you have verified the debt:
- Check the data breach list first: If the original provider was affected, verify your account was not created through identity theft before paying.
- Submit identity theft documentation if applicable: Police report and FTC affidavit by certified mail to NRS, plus simultaneous credit bureau disputes.
- Communicate in writing: Given documented phone access issues, certified mail is the most reliable channel.
- Negotiate a settlement: NRS does negotiate on valid accounts. Get any agreement in writing before paying.
Ready to take action on your credit?
Get your personalized plan in 30 seconds. Free, no credit check.
How to Contact Nationwide Recovery Service
Handle all communication in writing:
- Tennessee operations: Nationwide Recovery Service, 545 West Inman Street, Cleveland, TN 37311
- Georgia corporate: 5655 Peachtree Parkway, Norcross, GA 30092
- Mailing address: PO Box 8005, Cleveland, TN 37320
- Phone: (800) 776-4600
Bottom Line
Nationwide Recovery Service suffered a 2024 ransomware breach affecting over 516,000 individuals across dozens of healthcare clients. If you received a breach notification from any NRS-affiliated provider, monitor your credit closely and submit identity theft documentation if an NRS account appears that you did not open.
Communicate by certified mail given documented phone access issues. Verify insurance billing before paying any medical balance NRS is pursuing.
Brooke Banks is a personal finance writer specializing in credit, debt, and smart money management. She helps readers understand their rights, build better credit, and make confident financial decisions with clear, practical advice.