Medical testing service provider, Laboratory Services Cooperative (LSC), is informing 1.6 million people that their personal data was stolen in a data breach that occurred in October 2024.
See also: WK Kellogg: Employee and supplier data breach
During the cyberattack, which was detected on October 27, an attacker gained access to LSC's network and extracted certain files containing patient and employee information.
Information that may have been compromised includes names, addresses, phone numbers, email addresses, dates of birth, Social Security numbers, driver's license numbers, government ID or passport numbers, demographics, and health insurance information, such as plan name and type, insurance provider, and member/group number.
For some patients, the compromised information also includes diagnosis and treatment details, dates of services, treatment location, medical record numbers, lab results, and other relevant care details.
See also: Port of Seattle: Data breach affects 90,000 people
In some cases, billing and payment information, such as bank account information, credit card, billing details, balance information, claim numbers, and other financial information, has also been compromised.
Information about dependents or beneficiaries has also been breached for LSC employees, according to the Seattle-based nonprofit's announcement.
LSC also revealed that some of the affected individuals are Planned Parenthood who visited select centers where LSC provides laboratory services.
In a regulatory filing to the Maine Attorney General's Office, LSC revealed that 1.6 million people were affected and is offering them 12 or 24 months of free credit monitoring and medical identity protection services
See also: State Bar of Texas: Data breach by INC ransomware gang?
Data breaches are incidents in which unauthorized individuals gain access to sensitive, confidential, or protected information. These incidents can have serious consequences for individuals, businesses, and organizations, both from a security and legal perspective. To protect yourself from data breaches, implement access policies that only allow authorized users, use strong passwords and multi-factor authentication, implement data encryption , train staff to avoid phishing attacks, and create regular backups and software updates.
Source: securityweek
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
