Breachesby GlyphQuest Diagnostics
Disclosed Dec 12, 201634,055 affectedConfirmed
The covered entity (CE), Quest Diagnostics, reported that it was the victim of a cyber-attack that affected the electronic protected health information (ePHI) of 34,055 individuals. The ePHI involved included names, dates of birth, telephone numbers, and lab results. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional administrative and technical safeguards to better protect its ePHI. OCR obtained assurances that the CE implemented the corrective actions noted.
What is known
| People affected | 34,055 (as reported to HHS) |
|---|---|
| Disclosed | Dec 12, 2016 |
| Discovered | Nov 28, 2016 |
| Happened | Nov 26, 2016 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Quest Diagnostics
Cybersecurity incident disclosed to the SEC (8-K Item 8.01)Cybersecurity incident disclosed to the SEC (8-K Item 8.01)HackingHealthcareUSOct 22Insider breachInsider exposed names and health records. Reported to the HHS archive.1,062 affectedHealthcareUSOct 25, 2024Breach, details not statedBreach notice filed with the California AG, details not stated.5,325 affectedHealthcareUSNov 16, 2021Billing vendor AMCA breach exposes data of 11.9 million Quest patientsVendor breach exposed names, financial details, payment cards, health records and Social Security numbers.Vendor breach12M affectedHealthcareUSJun 3, 2019Breach, details not statedExposed names and Social Security numbers. Reported to the California AG.HealthcareUSDec 19, 2014
History of this record
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
organization to hhsby backfillSource
1 to 34055by backfillSource
empty to The covered entity (CE), Quest Diagnostics, reported that it was the victim of a cyber-attack that affected the electronic protected health information (ePHI) of 34,055 individuals. The ePHI involved included names, dates of birth, telephonby backfillSource
empty to organizationby backfillSource
empty to 1by backfillSource
empty to 2016-11-28by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.