QUEST DIAGNOSTICS INCORPORATED

Quest Diagnostics notified patients of a breach affecting approximately 34,000 individuals. On November 26, 2016, an unauthorized third party accessed the MyQuest by Care360 internet application, obtaining PHI including names, dates of birth, lab results, and telephone numbers. The incident was discovered on November 28, 2016. No SSNs or financial data were compromised. Quest Diagnostics engaged a cybersecurity firm and reported the incident to federal law enforcement.

Affected (this filing): 34,000

Quest Diagnostics reported a data breach to the Oregon Attorney General. The breach was reported on 2016-12-12. The breach occurred during 11/26/2016. The breach was discovered on 11/28/2016. 34,055 individuals were affected. Notice was sent on 12/12/2016.

Affected (this filing): 34,055

Quest Diagnostics (NJ healthcare provider) reported a hacking/IT incident affecting a network server that exposed the ePHI of 34,055 individuals. Data elements involved: names, dates of birth, telephone numbers, and lab results. The CE notified HHS, affected individuals, and the media, and implemented additional administrative and technical safeguards. OCR obtained assurances that corrective actions were implemented. No business associate involvement reported.

Affected (this filing): 34,055