Breachesby GlyphQuest Diagnostics
Disclosed Oct 25, 20241,062 affectedConfirmed
The covered entity (CE), Quest Diagnostics, reported that an employee misconfigured a website that allowed the protected health information (PHI) of 1,062 individuals to become viewable by others. The PHI involved included names, addresses, health insurance information, and treatment information. The CE notified HHS and the affected individuals. In response to the breach, the CE implemented additional administrative, technical, and security safeguards. Staff were also provided additional cybersecurity training.
What is known
| People affected | 1,062 (as reported by the organization) |
|---|---|
| Disclosed | Oct 25, 2024 |
| Happened | Aug 8, 2024 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Quest Diagnostics
Cybersecurity incident disclosed to the SEC (8-K Item 8.01)Cybersecurity incident disclosed to the SEC (8-K Item 8.01)HackingHealthcareUSOct 22Breach, details not statedBreach notice filed with the California AG, details not stated.5,325 affectedHealthcareUSNov 16, 2021Billing vendor AMCA breach exposes data of 11.9 million Quest patientsVendor breach exposed names, financial details, payment cards, health records and Social Security numbers.Vendor breach12M affectedHealthcareUSJun 3, 2019Hacking breachHacking exposed names and health records. Reported to the California AG.34K affectedHealthcareUSDec 12, 2016Breach, details not statedExposed names and Social Security numbers. Reported to the California AG.HealthcareUSDec 19, 2014
History of this record
unknown to insiderby backfillSource
[] to ["names","health"]by backfillSource
empty to The covered entity (CE), Quest Diagnostics, reported that an employee misconfigured a website that allowed the protected health information (PHI) of 1,062 individuals to become viewable by others. The PHI involved included names, addresses,by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.