Clinical Pathology Diagnostics, LLC
bd_06605b2ac4dee26d · schema v1 · pii pii-v1
Full breach record for Clinical Pathology Diagnostics, LLC →Clinical Pathology Laboratories, Inc. (CPL) notified California regulators of a data security incident involving its third-party vendor, Retrieval Masters Creditors Bureau (d/b/a American Medical Collection Agency or AMCA). On May 15, 2019, CPL was informed that AMCA experienced unauthorized access to a database containing patient information. The breach affected patient data including names, addresses, phone numbers, dates of birth, service dates, balances, and treatment provider information. CPL stopped using AMCA for collection efforts and engaged cybersecurity experts. No misuse of information was known at the time of notification.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_55b19cd4e3c64ad4HHS OCRfiled 2019-07-15Verified
- bd_beb59c790c582205Washington State AGfiled 2019-07-15Verified
- bd_4faba27a85ee90a6Oregon State AGfiled 2019-07-16(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-148940
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 15, 2019
- Raw hash
- 33c08e66839aa7a61ada662364e816f5065614f25d6b515cc290849b443b8de4
Reporting entity
- Name
- Clinical Pathology Diagnostics, LLCnorm: clinical pathology diagnostics
Victim entity
- Name
- Clinical Pathology Diagnostics, LLCnorm: clinical pathology diagnostics
Incident
- Discovered
- May 15, 2019
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via Retrieval Masters Creditors Bureau d/b/a American Medical Collection Agency
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 9 weeks(61 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.