Clinical Pathology Laboratories, Inc.

Clinical Pathology Laboratories, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2019-07-16. The breach occurred during 3/21/2019. The breach was discovered on 5/15/2019. Notice was sent on 7/15/2019.

Clinical Pathology Laboratories, Inc. (CPL) notified patients of a data security incident involving its vendor, Retrieval Masters Creditors Bureau d/b/a American Medical Collection Agency (AMCA). The incident involved unauthorized access to an AMCA database and the payment page on AMCA's website, affecting CPL patient data. The breach window was August 1, 2018, to March 30, 2019. CPL was notified on May 15, 2019. Affected data included names, addresses, phone numbers, dates of birth, dates of service, balance information, and treatment provider information. CPL ceased using AMCA for collections and engaged cybersecurity experts.

Clinical Pathology Laboratories, Inc. reported to HHS on 2019-07-15 a Hacking/IT Incident affecting 1,733,836 individuals. The breach involved a business associate, Retrieval-Masters Creditors Bureau, Inc., which suffered a cyber-attack affecting ePHI located on a network server. The CE notified HHS, individuals, and media, provided credit monitoring, and terminated the BA relationship.

CLINICAL PATHOLOGY LABORATORIES, INC filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-263). The register records the breach as discovered on April 21, 2019. Additional entities named: RETRIEVAL MASTERS CREDITORS BUREAU DBA. AMERICAN MEDICAL COLLECTION AGENCY. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.