Sunrise Medical Laboratories

Sunrise Medical Laboratories, Inc. notified patients of a data security incident involving its vendor, Retrieval Masters Creditors Bureau d/b/a American Medical Collection Agency (AMCA). Unauthorized access occurred to AMCA's website payment page and database between August 1, 2018, and March 30, 2019. Sunrise was notified on May 15, 2019. Affected data may include names, addresses, phone numbers, dates of birth, dates of service, balance information, and treatment provider information. Sunrise ceased using AMCA and engaged cybersecurity experts.

Sunrise Medical Laboratories, Inc. notified patients that its vendor, American Medical Collection Agency (AMCA), experienced a data security incident on May 15, 2019. Unauthorized access to an AMCA database containing patient information occurred. Affected data included names, addresses, DOBs, and treatment details. Sunrise engaged cybersecurity experts and terminated the vendor relationship.

Sunrise Medical Laboratories, Inc. reported to HHS on 2019-07-15 a Hacking/IT Incident affecting 401,901 individuals. Breached information located on Network Server. The business associate, Retrieval-Masters Creditors Bureau, Inc., was the victim of a cyber-attack. ePHI included names, addresses, phone numbers, dates of service, birthdates, clinical information, and financial information.

SUNRISE MEDICAL LABORATORIES, INC filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-421). The register records the breach as discovered on March 21, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.