Quest Diagnostics said the personal and medical information of nearly 12 million people, including their Social Security numbers, has potentially been breached.

Quest, a company that specializes in blood testing, said in a Monday press release that an “unauthorized person” gained access to a system used by the American Medical Collection Agency, a billing collection vendor for one of the company’s contractors.