The Lab Portal Breach
An intruder got into Quest Diagnostics' Quanum LSM, the online system clients use to order lab tests, and Quest believes some patient records were exposed.
Key terms
AP Cybersecurity alignment
- 2.1.D.2An asset is anything valuable. Assets include financial resources, intellectual property, data, digital infrastructure, physical property, and reputation.Learning objective: Describe the risk assessment process.
- 2.1.D.5The severity of an attack is often measured by financial cost, which can also include reputational and operational impacts.Learning objective: Describe the risk assessment process.
- 2.1.E.2Risk avoidance stops the activity that is generating the risk. If the activity is a critical part of an organization’s mission or purpose, then avoidance is not possible.Learning objective: Identify strategies for managing risk.
AP Networking alignment
- 4.1.A.3When confidentiality is compromised, systems are vulnerable to having sensitive data exposed or stolen. A breach of confidentiality can be identified by: • unauthorized access • network traffic showing exfiltration of…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.
- 4.1.A.5When availability is compromised, systems have unexpected periods of time when they are out of service. A breach of availability can be identified by: • an inability to access systems, networks, or resources • slow or dropped…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.