BioReference Laboratories Inc.

BioReference Laboratories notified NH AG of a third-party breach involving billing collection vendor AMCA. Unauthorized access occurred Aug 2018–Mar 2019. Patient PII, PHI, and financial data were exposed. Notices sent July 29, 2019. BioReference terminated relationship with AMCA.

BioReference Laboratories, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-07-30. 32 Massachusetts residents were affected. The report records the breach type as electronic.

BioReference Laboratories, Inc. (NJ) reported to HHS OCR on 2019-07-30 a Hacking/IT Incident affecting 425,749 individuals. The breach occurred at business associate Retrieval-Masters Creditors Bureau, Inc. d/b/a American Medical Collection Agency (AMCA), which was the victim of a cyber-attack. ePHI exposed included names, birthdates, clinical information, health insurance information, and treatment information. The CE notified HHS, affected individuals, and media; implemented additional administrative safeguards; and terminated its relationship with AMCA. OCR investigation completed.

BIOREFERENCE LABORATORIES filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-326). The register records the breach as discovered on August 1, 2018. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

BioReference Laboratories, Inc. reported to HHS on 2017-04-14 an Improper Disposal affecting 1,772 individuals. Breached information located on Paper/Films. An employee improperly disposed of documents containing PHI including names, DOBs, addresses, SSNs, and health insurance info. The entity offered credit monitoring and retrained staff.

BioReference Laboratories, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-04-11. 4 Massachusetts residents were affected. The report records the breach type as electronic.

BioReference Laboratories, Inc. (NJ) reported to HHS OCR on 2016-04-08 an Unauthorized Access/Disclosure affecting 3,563 individuals. Several employees took pictures of documents containing PHI, including names, dates of birth, addresses, health insurance information, SSNs, diagnoses, and lab results. OCR investigated and the CE implemented new handheld-device policies, encrypted communications tools, and offered credit monitoring to affected individuals. Breached information located on: Other.

BioReference Laboratories, Inc. (NJ) reported to HHS OCR on 2014-07-23 an Unauthorized Access/Disclosure affecting 3,334 individuals. The covered entity's business associate inadvertently made ePHI viewable over the Internet via a network server. Exposed data included names, addresses, dates of birth, Social Security numbers, and treatment information. Following OCR investigation, the CE and BA implemented additional administrative and technical safeguards, and OCR obtained assurances of corrective action.