The Weakest Links – Vendors in the Spotlight, Again

In June, we learned of two more companies reporting the potential compromise of financial and medical information of millions of Americans. The headlines sound familiar as does the attack vector – compromise of a third-party vendor with access to patient information.

On June 3, Quest Diagnostics Incorporated reported that a breach at one of its vendors, American Medical Collection Agency, may have compromised the personal information of approximately 11.9 million of its patients. The compromised information includes credit card numbers, bank account information, social security numbers and unspecified medical information, among other things.