LabCorp

Brian Krebs reports that the medical testing company LabCorp was a victim of a data breach where 7.7 million patient records were leaked. LabCorp reported that the patients' name, address, birthday, phone, medical provider, date of services, and account balance information were potentially included in the leak. Currently. LabCorp is sending out notices to 200,000 customers whose bank or credit card information may have been accessed. The American Medical Collection Agency, which LabCorp uses for payment collection, was the source of the breach. This is the second report this week of an AMCA affiliated company being affected. Earlier this week, Quest Diagnostics reported that some 11.9 million customer records were compromised.

Recommendations

• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• Monitor announcement from LabCorp in order to determine if your information was a part of the breach
• Monitor for further medical company disclosures and breaches by the American Medical Collection Agency

Details

It has been a bad week for medical providers using American Medical Collection Agency as their billing agency. Earlier this week, we reported that Quest Diagnostics had been compromised and 11.9 million patient records were leaked. Brian Krebs reported that Quest was not the only victim in this leak and that LabCorp, a medical testing company, was also affected by the breach. LabCorp announces that 7.7 million patient records were potentially compromised. The data leaked from LabCorp customer records indicates that name, date of birth, address, phone, service dates, medical provider, and account balance information was among the information improperly disclosed. Given that the AMCA collects payments for a variety of businesses including medical providers, marketers, telecommunication companies and traffic and toll agencies, these leaks are likely just the beginning and there will likely be further disclosures about compromised records.