Laboratory Medicine Consultants, Ltd.
bd_0ad11e0dda9d21e8 · schema v1 · pii pii-v1
Full breach record for Laboratory Medicine Consultants, Ltd. →Laboratory Medicine Consultants, Ltd. (LMC) notified California residents of a data security incident involving its third-party vendor, Retrieval Masters Creditors Bureau (d/b/a American Medical Collection Agency or AMCA). The incident, occurring between August 2018 and March 2019, involved unauthorized access to an AMCA database containing patient information. LMC's own systems were not affected. Affected data included names, addresses, phone numbers, dates of birth, service dates, balances, and treatment provider information. LMC engaged cybersecurity experts and ceased using AMCA for collection efforts.
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_1aa0406d480bd657Montana State AGfiled 2019-07-24Verified
- bd_eacb6b6544ce7291Washington State AGfiled 2019-07-24Verified
- bd_aab21214547d16ddOregon State AGfiled 2019-07-25(1d gap)Verified
- bd_da949aa867da0702HHS OCRfiled 2019-07-25(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-149195
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 24, 2019
- Raw hash
- cdad2a31664ae1497a2f31a06a8ef9acd0b90f3d80495177b802e404786a6bf5
Reporting entity
- Name
- Laboratory Medicine Consultants, Ltd.norm: laboratory medicine consultants
Victim entity
- Name
- Laboratory Medicine Consultants, Ltd.norm: laboratory medicine consultants
Incident
- Discovered
- May 15, 2019
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed breach notification with California Office of the Attorney General
- Third party
- via Retrieval Masters Creditors Bureau d/b/a American Medical Collection Agency
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 10 weeks(70 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.