Quest Diagnostics says nearly 12 million people may have had personal, financial, and medical data leaked

Around 11.9 million Quest Diagnostics patients may have had serious personal information leaked due to an issue with a payment system the company contracts with.

Quest's billing collections vendor, American Medical Collection Agency, informed the company on May 14 about a system breach, Quest said in a Monday filing. AMCA didn't have access to patients' lab results, but social security, credit card, and bank account numbers could have been leaked, The Wall Street Journal reports.

Quest is one of the world's largest chains of blood testing facilities, and uses AMCA to bill about 11.9 million of its patients. Sometime between Aug. 1, 2018 and March 30, 2019, someone gained unauthorized access to the data stored in AMCA, NBC News Philadelphia reports. It's unclear just what or how much data was accessed because AMCA has not yet provided a "detailed or complete" report, Quest said Monday. But information stored on AMCA's affected system "included financial information (e.g., credit card numbers and bank account information), medical information, and other personal information (e.g., Social Security Numbers)," Quest continued.

The Week

Escape your echo chamber. Get the facts behind the news, plus analysis from multiple perspectives.

SUBSCRIBE & SAVE

Sign up for The Week's Free Newsletters

Join more than 350,000 subscribers and keep yourself informed with a selection of The Week’s most interesting, enlightening and entertaining stories - plus daily puzzles.

Join more than 350,000 subscribers and keep yourself informed with a selection of The Week’s most interesting, enlightening and entertaining stories - plus daily puzzles.

Sign up

Quest has since "suspended collection requests from AMCA and notified affected health plans," the Journal writes. It is working with law enforcement and security experts to evaluate just who and what was affected.