Western Pathology data breach (2019)

Breach window
Aug 1, 2018 → Mar 30, 2019
When the intrusion reportedly occurred, per the linked filings
287 days
Breach discovered
May 15, 2019
Reported by CALIFORNIA AG, HHS OCR filings
70 days
🐻California State AGFirst filinglinked via same-victim cross-source · 100%
Filed Jul 24, 2019bd_853b687bcda4aad7
Western Pathology Consultants, Ltd. notified California regulators of a data security incident involving its third-party vendor, Retrieval Masters Creditors Bureau d/b/a American Medical Collection Agency (AMCA). The breach occurred between August 1, 2018, and March 30, 2019, involving unauthorized access to an AMCA database containing patient information. Western Pathology engaged cybersecurity experts and terminated its relationship with AMCA.
🦬Montana State AGlinked via same-victim cross-source · 100%
Filed Jul 24, 2019bd_dfcde8da0f70df2a
Western Pathology reported a data breach to the Montana Attorney General. The breach was reported on 2019-07-24. The breach occurred on 3/21/2019. 2 Montana residents were affected.
Affected (this filing): 2
NVHHS OCRMost recentlinked via same-victim cross-source · 100%
Filed Jul 25, 2019bd_a3e215f21fb528ac
Western Pathology reported to HHS on 2019-07-25 a Hacking/IT Incident affecting 4,412 individuals. Breached information located on Network Server. The incident involved a business associate, American Medical Collection Agency, and affected demographic and clinical PHI. Western Pathology ceased using the BA, notified individuals, and cooperated with OCR.
Affected (this filing): 4,412

Western Pathology

Litigation Timing

Timeline