QUEST DIAGNOSTICS INCORPORATED

ExamOne, a Quest Diagnostics Company, notified Massachusetts residents of a breach involving specimens and paperwork for life insurance applications. Specimens and paperwork containing personal information (name, address, DOB, SSN last 4, driver's license, phone, physical measurements, medical history, medications, physician info) were not received by the testing laboratory as expected. No indication of theft or misuse, but risk exists. Credit monitoring and identity protection services offered for two years.

ExamOne, a Quest Diagnostics company, notified Massachusetts residents via letter dated May 5, 2026, regarding a misdelivery of life insurance application paperwork. Specimens and paperwork containing personal information (name, address, DOB, last 4 digits of SSN, driver's license, phone, policy number, physical measurements, medications) were not received by the testing laboratory as expected. ExamOne stated there is no reason to believe information was stolen or misused, but offered 2 years of free Equifax credit monitoring. No specific count of affected individuals was disclosed in this notice.

Quest Diagnostics Incorporated reported to HHS on 2024-10-25 a Unauthorized Access/Disclosure affecting 1,062 individuals. Breached information located on Network Server. An employee misconfigured a website allowing PHI to become viewable.

Quest Diagnostics notified New Hampshire residents of a data incident involving an unintentional exposure of confidential data due to a coding configuration issue. The company implemented additional security controls, engaged an external cybersecurity consultant to validate fixes, and established a call center. Impacted patients were offered free identity monitoring services through Kroll, including credit monitoring and fraud restoration. No evidence of misuse was found.

Quest Diagnostics Incorporated reported a data breach to the Indiana Attorney General. The breach occurred on 2024-08-08 and was reported on 2024-10-25. 12 Indiana residents were affected. 1,062 individuals affected in total.

Quest Diagnostics experienced an inadvertent data breach on August 8, 2024, caused by a misconfiguration in a new electronic payment feature. The error misdirected patient invoices, exposing personal and health information for 1,062 individuals. Quest discovered the incident on August 27, 2024, disabled the feature, and notified affected individuals on October 25, 2024, offering 12 months of identity monitoring.

Quest Diagnostics, Incorporated reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-10-25. 24 Massachusetts residents were affected.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in March 2024 (case 24-03-024). The register records the breach as discovered on August 1, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in March 2024 (case 24-03-006). The register records the breach as discovered on May 31, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in March 2024 (case 24-03-009). The register records the breach as discovered on May 11, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in March 2024 (case 24-03-025). The register records the breach as discovered on August 4, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in March 2024 (case 24-03-008). The register records the breach as discovered on July 2, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in March 2024 (case 24-03-021). The register records the breach as discovered on May 17, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in March 2024 (case 24-03-020). The register records the breach as discovered on July 4, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in March 2024 (case 24-03-026). The register records the breach as discovered on August 13, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in March 2024 (case 24-03-007). The register records the breach as discovered on June 14, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in March 2024 (case 24-03-022). The register records the breach as discovered on July 18, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in March 2024 (case 24-03-023). The register records the breach as discovered on July 25, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in February 2024 (case 24-02-213). The register records the breach as discovered on March 25, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in February 2024 (case 24-02-203). The register records the breach as discovered on October 5, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in February 2024 (case 24-02-239). The register records the breach as discovered on December 21, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in February 2024 (case 24-02-196). The register records the breach as discovered on April 5, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in February 2024 (case 24-02-220). The register records the breach as discovered on January 4, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in February 2024 (case 24-02-058). The register records the breach as discovered on July 12, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

QUEST DIAGNOSTICS filed a data-breach notice with the Illinois Attorney General in February 2024 (case 24-02-232). The register records the breach as discovered on July 14, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.