Nearly 12 million Quest Diagnostics patients could be affected by a collection agency breach

A collection company that worked with Quest Diagnostics informed the medical testing company that the data of 11.9 million patients may have been affected by a breach.

American Medical Collection Agency (AMCA), a bill collection service provider, reported that “an unauthorized user had access to AMCA’s system containing personal information that AMCA received from various entities, including of Quest “.

Forensic experts are said to be investigating the violation.

AMCA first notified Quest and the company Optum360 on May 14, 2019 of potential unauthorized activity on AMCA’s online payment page.

On May 31, 2019, the AMCA informed Quest and Optum360 that the data on the affected AMCA system included information regarding approximately 11.9 million Quest patients.

AMCA believes that this information includes personal information, including certain financial data, social security numbers, and medical information, but not the results of laboratory tests.

Quest reports that AMCA has yet to provide them or Optum360 with any detailed or complete information about the AMCA data security incident, including information about people who may have been affected.

Quest also said in a statement that they had “been unable to verify the accuracy of the information received from the AMCA.”

The statement continued:

“Quest takes this matter very seriously and is committed to protecting the privacy and security of our patients’ personal information. Since learning of the AMCA data security incident, we have suspended the sending of AMCA collection requests.

Quest will work with Optum360 to ensure Quest patients are properly informed in accordance with the law.

We are committed to keeping our patients, healthcare providers and all relevant parties informed as we learn more. “

Experts suggest protecting yourself by changing your passwords, opening a separate credit card for online transactions, including scheduling appointments. Also limit the information you upload to what is absolutely necessary and avoid saving credit card information online.

Quest Diagnostics full statement:

American Medical Collection Agency (AMCA), a bill collection service provider, has informed Quest Diagnostics that an unauthorized user has access to AMCA’s system containing personal information that AMCA has received from various entities, including Quest . AMCA provides bill collection services to Optum360, which in turn is a Quest contractor. Quest and Optum360 are working with forensic experts to investigate the case.

AMCA first notified Quest and Optum360 on May 14, 2019 of potential unauthorized activity on AMCA’s online payment page. On May 31, 2019, the AMCA informed Quest and Optum360 that the data on the affected AMCA system included information regarding approximately 11.9 million Quest patients. AMCA believes that this information includes personal information, including certain financial data, social security numbers, and medical information, but not the results of laboratory tests.

AMCA has not yet provided Quest or Optum360 with detailed or complete information about the AMCA data security incident, including information about people who may have been affected. And Quest was unable to verify the accuracy of the information received from the AMCA.

Quest takes this matter very seriously and is committed to protecting the privacy and security of our patients’ personal information. Since learning about the AMCA data security incident, we have suspended sending collection requests to the AMCA.

Quest will work with Optum360 to ensure Quest patients are properly informed in accordance with the law.

We are committed to keeping our patients, healthcare providers and all relevant parties informed as we learn more.