Data Breach Notifications

Entity Information

  • Type of Organization: Healthcare
  • Entity Name: Quest Diagnostics, Incorporated
  • Street Address: 500 Plaza Drive
  • City: Secaucus
  • State, or Country if outside the US: NJ
  • Zip Code: 07094

Submitted By

  • Name: Sari H. Ratican
  • Title: Counsel
  • Firm name (if different than entity): Fenwick & West LLP
  • Telephone Number: (310) 434-5495
  • Email Address: sratican@fenwick.com
  • Relationship to entity whose information was compromised: External Counsel

Breach Information

  • Total number of persons affected (including residents): 1,062
  • Total number of Maine residents affected: 4
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
  • Date(s) Breach Occured: August 08, 2024
  • Date Breach Discovered: August 27, 2024
  • Description of the Breach:
    • Inadvertent disclosure
  • Information Acquired - Name or other personal identifier in combination with:

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: October 25, 2024
  • Copy of notice to affected Maine residents: Attachment_--_Quest_Template_Notification_Letter_(10.25.2024).pdf
  • Date of any previous (within 12 months) breach notifications:
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: Kroll's "Complete" 3-Bureau Identity Monitoring Package for twelve (12) months including credit monitoring, a current credit report, various monitoring scans (including “Web Watcher,” “Public Persona,” and “Quick Cash”), $1 million identity fraud loss reimbursement, and fraud consultation and identity theft restoration services. PLEASE NOTE: The information potentially viewed by the other Quest patient varies and may include name, address, health data (such as referring physician, tests performed (but not test results), CPT codes), health insurance information (such as plan name), and billing data (such as invoice numbers). No driver's license or non-driver identification number was exposed.