8 Million LabCorp Customers’ Information Accessed By Cyber Criminals

LabCorp, also known as Laboratory Corporation of America Holdings, is the most recent big-name company to have informed its stakeholders of a cybersecurity breach. Recently, the collections agency American Medical Collection Agency, which through LabCorp handled billing, told LabCorp that unauthorized users had gained access to its digital bank of some 7.7 million customers’ financial and personal info.

The cybercriminals had unfettered access to the following types of information:

• Bank account details, including routing numbers.
• Credit card numbers.
• Dates of birth, mailing addresses, and phone numbers.
• Dollar amounts owed, healthcare provider’s information, and insurance providers.

Fortunately for consumers, American Medical Collection Agency didn’t store any Social Security numbers, one of the most important bits of personal information that fraudsters need to manage high success rates in defrauding consumers.

Just the day before, on Monday, June 3, 2019, Quest Diagnostics, LabCorp’s primary competitor in the United States, announced that its own customers’ information had been potentially accessed by the same cybercriminals that got their hands on LabCorp’s customers’ details.

Quest Diagnostics, also a public company, has collectively referred some 12 million customers to American Medical Collection Agency. Unlike its competitor, Quest Diagnostics did allow American Medical Collection Agency to store its customers’ Social Security numbers. Further, some types of Quest Diagnostics’ customers’ medical info were available to cybercriminals that were not stored in AMCA’s thought-to-be-secure bank of information. Quest Diagnostics made clear that none of its customers’ laboratory results were accessible to the unknown cybercriminals.

American Medical Collection Agency told both of the companies that it wasn’t sure of the exact date when the breach occurred, though it took place over the six-month span ranging from Aug. 1, 2018, to March 30 of this year.

Neither of the companies claims to be aware of which customers or how many of them were actually affected. Both Quest Diagnostics and LabCorp report that they will be informed of these two areas of concern after the American Medical Collection Agency is through with a review being carried out by an independent, third-party agency.

LabCorp stated in its press release concerning the issue that the personal and financial information of some 200,000 customers were likely handled by cybercriminals. All of these suspected victims have since been informed of the hack. AMCA shared that it would be offering all affected customers packages of financial services promoting cybersecurity via services targeting identity theft.