← American Medical Collection Agency

2019 — American Medical Collection Agency: Aug 2018–Mar 2019, 21.0M records

2019 21.0M records affected Share on X

Data compromised

Names, SSNs, payment cards, medical test data

Technical writeup

Aug 2018–Mar 2019. Unauthorized access to AMCA systems for 8 months. Exfiltrated data included names, SSNs, payment card info, and medical test data. Major clients affected: Quest Diagnostics (11.9M), LabCorp (7.7M), Clinical Pathology Laboratories (2.2M), BioReference (422k). AMCA filed for Chapter 11 bankruptcy in June 2019. 41 state AGs settled in 2021; $21M penalty suspended.

Root cause

Unauthorized access; AMCA failed to detect intrusion despite bank warnings.

References