Quest data breach: "between August 1, 2018 and March 30, 2019 an unauthorized user had access to AMCA’s system... [this] included financial information (e.g. credit card numbers and bank account information), medical information and other [PII such as SSN]"
https://www.sec.gov/Archives/edgar/data/1022079/000094787119000415/ss138857_8k.htm