Summary
Quest Diagnostics Inc. (DGX) filed an 8-K on October 8, 2021, to disclose a data security incident affecting its subsidiary, ReproSource. An unauthorized party gained access to ReproSource systems, potentially exposing protected health information and personally identifiable information of approximately 350,000 patients. The incident involved ransomware, which was contained and operations were restored. While the investigation did not confirm data acquisition, ReproSource is notifying affected individuals.
Key Highlights
- 1A data security incident occurred at Quest Diagnostics subsidiary, ReproSource, in August 2021.
- 2The incident involved unauthorized access to patient data, including protected health information and personally identifiable information.
- 3Ransomware was present and contained, with operations securely restored.
- 4Approximately 350,000 ReproSource patients may have had their personal information accessed.
- 5Quest Diagnostics' core systems were not impacted by the incident.
- 6The company does not believe the incident will have a material impact on its business, results of operations, or financial condition.
- 7Quest Diagnostics has cybersecurity insurance covering the incident.
Frequently Asked Questions
Quest Diagnostics' subsidiary, ReproSource, experienced a data security incident where an unauthorized party may have accessed patient data. This incident involved ransomware that was contained and operations were restored.
Based on the investigation, data accessed may contain personal information of approximately 350,000 ReproSource patients.
No, Quest Diagnostics explicitly states that its own systems were not impacted by this incident; only the systems of its subsidiary, ReproSource, were affected.
Quest Diagnostics maintains cybersecurity insurance and has stated that it does not believe this incident will have a material impact on its business, results of operations, or financial condition.