Another day in the healthcare industry, another big data breach.

This week, Quest Diagnostics announced in a security filing with the Securities and Exchange Commission, that a collection agency vendor that it uses for collection services notified it that for eight months, an unauthorized user had access to Quest patients’ records, including credit card numbers, bank account information, medical information, and personal information, including Social Security numbers. Quest has reported that no laboratory data of patients were involved.

Quest has publicly stated that it has stopped sending collection cases to the vendor. The vendor has stated that it is presently investigating the incident. It has taken down its web payments page, moved its online payments portal services to a vendor, and retained security experts to assist with the investigation.