Laboratory Medicine Consultants, Ltd.

Laboratory Medicine Consultants, LTD reported a data breach to the Oregon Attorney General. The breach was reported on 2019-07-25. The breach occurred during 3/21/2019. The breach was discovered on 5/15/2019. Notice was sent on 7/24/2019.

Laboratory Medicine Consultants, Ltd. reported to HHS on 2019-07-25 a Hacking/IT Incident affecting 144,775 individuals. Breached information located on Network Server. A business associate, American Medical Collection Agency, compromised its payment website, exposing patient PHI (demographic, clinical, financial). The CE ceased using the BA, notified individuals and HHS, and cooperated with OCR.

Laboratory Medicine Consultants, Ltd. (LMC) notified California residents of a data security incident involving its third-party vendor, Retrieval Masters Creditors Bureau (d/b/a American Medical Collection Agency or AMCA). The incident, occurring between August 2018 and March 2019, involved unauthorized access to an AMCA database containing patient information. LMC's own systems were not affected. Affected data included names, addresses, phone numbers, dates of birth, service dates, balances, and treatment provider information. LMC engaged cybersecurity experts and ceased using AMCA for collection efforts.

Laboratory Medicine Consultants reported a data breach to the Montana Attorney General. The breach was reported on 2019-07-24. The breach occurred on 3/21/2019. 100 Montana residents were affected.

Laboratory Medicine Consultants, LTD, a health sector entity reported a unclear/unknown incident to the Washington Attorney General. The organization became aware of the incident on 2019-05-15 and filed notice on 2019-07-24. 684 Washington residents were affected. 70 days elapsed between awareness and notification. 55 days to identify the breach.