Quest Diagnostics notified the SEC about a ransomware attack on ReproSource, a fertility facility operated by the business, in August. The ransomware attack resulted in a data breach, revealing sensitive health and financial details for around 350,000 ReproSource patients.
Quest claimed in a response to ZDNet that ReproSource informed them of a data security issue in which an unauthorized party may have obtained or gained some patients’ personal health information and personally identifiable information. “An unauthorized entity gained access to the ReproSource network on August 8, 2021. On the morning of August 10, ReproSource found ransomware and, in less than an hour, had shut down all network connections and contained the situation “a representative for the company revealed.
On September 24, ReproSource began mailing breach notification letters to victims, according to Quest. Names, addresses, phone numbers, email addresses, dates of birth, and billing information were among the personal information revealed during the ransomware attack, according to the letters.
On October 11, Healthcare facilities continue to face the brunt of ransomware attacks, specifically because of the sensitive data they are forced to collect on patients, employees, and visitors.
The breach was revealed following a regulatory filing by Quest, which stated that the larger company was unaffected by the ReproSource issue but verified that it was a ransomware attack. Quest said it has cybersecurity insurance and doesn’t expect the attack to have the same financial impact as prior ransomware attacks.