Recently, Quantum Imaging & Therapeutic Associates, Inc. (“QITA”) reported a data breach that impacted sensitive patient data. According to the company’s most recent filing, the breach resulted in certain patients’ names, mailing addresses, dates of birth, Social Security numbers, and protected health information being compromised. On May 9, 2022, Quantum filed an official notice of the breach and sent out data breach letters to all affected parties.

If you received a data breach notification, it is essential you understand what is at risk and what you can do about it. To learn more about how to protect yourself from becoming a victim of fraud or identity theft and what your legal options are in the wake of the Quantum Imaging data breach, please see our recent piece on the topic here.

What We Know About the Quantum Imaging Data Breach

According to the official notice filed by the company, on October 7, 2021, QITA detected a data security incident. QITA claims to have stopped the intrusion, however, the company continued to look into the incident to determine how it occurred and whether any sensitive patient information was compromised as a result. This investigation confirmed that certain information on the QITA network was exposed to unauthorized access.

Upon discovering that sensitive consumer data was accessible to an unauthorized party, Quantum Imaging then reviewed the affected files to determine exactly what information was compromised. While the breached information varies depending on the individual, it may include your child’s name, mailing address, date of birth, Social Security number, and protected health information. The company notes that certain information pertaining to deceased patients and child patients was also impacted by the breach.

On May 9, 2022, Quantum Imaging sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.

Quantum Imaging & Therapeutic Associates, Inc. is a radiology practice based in Lewisberry, Pennsylvania. The practice works with dozens of sub-specialty, multi-specialty and general radiologists who are licensed across the country. Quantum Imaging & Therapeutic Associates, Inc. is one of the largest private radiology practices in Pennsylvania, with more than 114 employees. The practice generates approximately $11 million in annual revenue.

How Do Data Breaches Happen?

At its most basic level, a data breach is an incident in which a person is able to access information that doesn’t belong to them and that they do not have a right to access. Most data breaches involve hackers or other cybercriminals actively developing a plan to attack a company’s computer system. For example, malware, ransomware, and phishing are all types of cyberattacks carried out by cybercriminals.

While most data breaches involve a bad actor who affirmatively seeks to obtain consumer data, others are the result of a company’s mistake. For example, if a company that has sensitive patient information stored on its server accidentally sends patient data out over its email system it is also considered a data breach.

What is important to remember is that, in either type of data breach, the company that is responsible for maintaining consumer data is in the best position to protect against a breach. Companies should employ robust data security measures focused on preventing outside attacks as well as employee mistakes to ensure consumer data remains safe. Those organizations that fail to adequately safeguard consumer information may be liable through a data breach class action lawsuit.