LabCorp investors file lawsuit, alleging ‘persistent’ failure to secure data

LabCorp investors have filed a lawsuit against the company following a major data breach last year that was one of three cybersecurity incidents the company has faced since 2018. The suit, filed by shareholder Raymond Eugenio on behalf of LabCorp investors, alleges that the medical testing company’s chief executive, chief financial officer, chief information officer and its board of directors failed to address “persistently deficient” data protection measures regarding the theft of data about millions of people. The legal complaint, first reported by Bloomberg, involves a hack on the American Medical Collection Agency (AMCA), a debt collection agency which made collections on behalf of LabCorp and other medical companies. Hackers stole data about roughly 20 million people, including some 7.7 LabCorp patients, between August 2018 and March 2019. In a separate incident, LabCorp exposed 10,000 medical documents, including patient test results, according to a TechCrunch article published in January. Burlington, […]

The post LabCorp investors file lawsuit, alleging ‘persistent’ failure to secure data appeared first on CyberScoop.

Continue reading LabCorp investors file lawsuit, alleging ‘persistent’ failure to secure data

Top 10 Breaches and Leaky Server Screw Ups of 2019

2019 was a banner year for data exposures, with billions of people affected by cloud misconfigurations, hacks and poor security practices in general. Here’s the Threatpost Top 10 for data-breach news of the year, featuring all the low-lights. Continue reading Top 10 Breaches and Leaky Server Screw Ups of 2019

AMCA parent company files for bankruptcy amid data breach fallout

The debt collection agency responsible for a data breach that compromised information on at least 20 million people has declared bankruptcy. U.S.-based Retrieval-Masters Creditors Bureau Inc., which collects medical bills under the name American Medical Collection Agency (AMCA), filed for bankruptcy protection in the Southern District of New York. The filing comes after the company learned of a data breach lasting from August 1, 2018 to March 30 affecting information on millions of patients at testing firms Quest Diagnostics and LabCorp. AMCA’s four largest clients soon ceased operations with the company. Affected companies included Quest, with information about some 11.9 million people involved, LabCorp with 7.7 million, Carecentrix with 500,000 patients hit, and Bio Reference Labs with 423,000 patients. Numerous class-action lawsuits also have been filed, with plaintiffs alleging an unreasonable breach notification delay, a lack of reasonable data security and possible violations of the Health Insurance Portability and Accountability […]

The post AMCA parent company files for bankruptcy amid data breach fallout appeared first on CyberScoop.

Continue reading AMCA parent company files for bankruptcy amid data breach fallout

Quest and AMCA Leak 12M Blood-Test Patients’ Data

Millions of people might have had their financial and medical information stolen. Quest Diagnostics contracted its billing collections to a vendor who further subcontracted the work to AMCA, which allowed its systems to be hacked.
The post Quest and A… Continue reading Quest and AMCA Leak 12M Blood-Test Patients’ Data