Quest and Labcorp Data Security Incident

Silver Spring, MD June 4, 2019–Quest Diagnostics one of the large lab services providers in the US posted a press release on Monday June 3, 2019 indicating that one of their vendors, American Medical Collection Agency (AMCA) has informed them that an unauthorized user had access to AMCA’s system including personal information from various entities including Quest.
 
The press release indicated that the exposed information was of a personal and financial nature and that lab data was not included. “AMCA first notified Quest and Optum360 on May 14, 2019 of potential unauthorized activity on AMCA’s web payment page. On May 31, 2019, AMCA notified Quest and Optum360 that the data on AMCA’s affected system included information regarding approximately 11.9 million Quest patients. AMCA believes this information includes personal information, including certain financial data, Social Security numbers, and medical information, but not laboratory test results.” The full press release from Quest can be found here.
 
This breach may affect some Ascend to Wholeness Healthcare Plan (the Plan) members. If you used Quest and paid for those services, you will want to follow this story further to learn if your data was compromised and what can be done to secure your data. Our understanding is that Quest will be working to determine who was affected and provide the member with additional information. If a member believes they might be affected, they should watch their mail and email for communication directly from Quest. If identity theft coverage is in place, they may want to contact the carrier.
 
Adventist Risk Management, Inc. as the plan administrator is very concerned when a service provider experiences a security breach that may affect the Plan’s members and it is a top priority to share any information that may be available. It is important to know that the biometric screenings conducted with Interactive Health do not use Quest Diagnostics as their lab service provider, however individuals may have used Quest in connection with other medical visits and procedures.
 
Updated June 5, 2019–Labcorp has announced that they also used AMCA for web payments. Interactive Health does use Labcorp in conjunction with the biometric screenings offered by the Plan. In a filing on June 4 with the Securities and Exchange Commission, Labcorp stated  "approximately 7.7 million consumers" are affected by a breach at third-party collections firm American Medical Collection Agency, also known as AMCA. Some Plan members may have used Labcorp in connection with other medical visits and procedures. Our understanding is that Labcorp and AMCA will be working to determine who was affected and provide the member with additional information.