American Esoteric Laboratories

American Esoteric Laboratories (AEL) notified patients that its vendor, Retrieval Masters Creditors Bureau d/b/a American Medical Collection Agency (AMCA), experienced a data security incident on May 15, 2019. The incident involved unauthorized access to an AMCA database containing patient information belonging to AEL. AEL engaged cybersecurity experts and ceased using AMCA for collections.

AMERICAN ASOTERIC LABORATORIES filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-261). The register records the breach as discovered on April 21, 2019. Additional entities named: RETRIEVABLE MASTERS CREDITORS BUREAU DBA. AMERICAN MEDICAL COLLECTION AGENCY. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

American Esoteric Laboratories reported the theft of an employee laptop on October 15, 2017. The unencrypted device may have contained PHI, SSNs, and medical records for 3 New Hampshire residents. The company disabled network access, notified police, and offered 12 months of credit monitoring.

American Esoteric Laboratories notified Montana residents that a stolen employee laptop on October 15, 2017 may have contained PHI and PII (SSN, DOB, health insurance). AEL disabled accounts, reported to police, and offered 1 year of credit monitoring via ID Experts. No evidence of inappropriate access was found.

American Esoteric Laboratories reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-04-20. 3 Massachusetts residents were affected. The report records the breach type as electronic.