Quest Diagnostics Details

Quest Diagnostics

Secaucus, New Jersey • employees • Healthcare

Industry

Healthcare

Security Incidents

Quest Diagnostics Incorporated is an American clinical laboratory. A Fortune 500 company, Quest operates in the United States, Puerto Rico, Mexico, and Brazil.

Security Incidents

Quest Diagnostics Breach of May 2019

Severity Score

Moderate

Type

3rd Party Compromise

Summary

In May 2019, Quest Diagnostics, a major medical testing company, disclosed a data breach that affected approximately 11.9 million patients. The breach was traced back to the American Medical Collection Agency (AMCA), a third-party billing collections service provider. Unauthorized users gained access to AMCA's systems, compromising sensitive information including personal, financial, and medical data of Quest Diagnostics' patients. The breach was discovered when AMCA detected suspicious activity on its web payment page, leading to an investigation and subsequent notification to Quest Diagnosti...
Show more

Severity

The breach was severe as it potentially exposed sensitive personal information of about 12 million Quest Diagnostics customers, including medical and financial data such as Social Security numbers. The breach occurred at a third-party billing company, American Medical Collection Agency (AMCA), between August 2018 and March 2019, indicating a prolonged period of unauthorized access to customer data.

Impact

The breach impacted approximately 11.9 million patients of Quest Diagnostics, putting their confidential patient records at risk. The compromised data included sensitive information like Social Security numbers, posing a significant threat to the privacy and security of the affected individuals.