CBLPath

CBLPath reported a data breach to the Montana Attorney General. The breach was reported on 2019-07-15. The breach occurred from 8/1/2018 to 3/30/2019. 11 Montana residents were affected.

CBLPath Inc. notified Delaware residents of a data security incident involving its vendor, Retrieval Masters Creditors Bureau d/b/a American Medical Collection Agency (AMCA). On May 15, 2019, AMCA experienced unauthorized access to a database containing patient information belonging to CBLPath. The incident involved AMCA's website payment page and database. Affected data included names, addresses, phone numbers, dates of birth, dates of service, balance information, and treatment provider information. CBLPath stopped using AMCA and engaged cybersecurity experts.

CBLPath, Inc. reported to HHS on 2019-07-15 a Unauthorized Access/Disclosure affecting 141,956 individuals. Breached information located on Network Server. The breach involved its business associate, Retrieval-Masters Creditors Bureau, Inc., which suffered a cyber-attack exposing ePHI including names, addresses, phone numbers, dates of service, birthdates, clinical information, and financial information. CBLPath terminated its relationship with the BA and implemented additional administrative safeguards.

CBLPath, Inc. notified California regulators of a data security incident involving its third-party vendor, Retrieval Masters Creditors Bureau (d/b/a American Medical Collection Agency or AMCA). On May 15, 2019, CBLPath was informed that AMCA experienced unauthorized access to a database containing patient information. The breach affected data including names, addresses, dates of birth, and treatment provider information. CBLPath terminated its relationship with AMCA and engaged cybersecurity experts for investigation.