Skip to main content
See every side of every news story
Published • loading... • Updated

Labcorp Reaches $2.3M Multistate Settlement over 2019 Data Breach

The settlement requires Labcorp to strengthen vendor oversight and information security after a breach that may have exposed data from 27.5 million people.

  • On Thursday, 44 state attorneys general secured a $2.3 million settlement with Laboratory Corporation of America , resolving a multistate investigation into a 2019 data breach at its debt collector, American Medical Collection Agency .
  • The 2019 breach exposed personal information of over 27.5 million people, including 10.2 million Labcorp patients, establishing that HIPAA-covered entities must oversee vendors entrusted with sensitive health information.
  • Labcorp must enhance its information security and vendor risk management programs, including hiring a third-party assessor to audit compliance, while paying $2,287,455 to the states.
  • This settlement supplements a 2021 multistate agreement with AMCA that included a $21 million suspended payment, while Labcorp separately faces an ongoing $35 million class-action lawsuit involving other AMCA client entities.
  • Illinois Attorney General Kwame Raoul stated that while companies can delegate authority, "data security is a non-delegable duty," emphasizing that businesses must properly vet vendors to ensure sensitive information remains secure.
Insights by Ground AI

12 Articles

Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 86% of the sources are Center
86% Center

Factuality Info Icon

To view factuality data please Upgrade to Premium

Ownership

Info Icon

To view ownership data please Upgrade to Vantage

WOWK broke the news in Charleston, United States on Friday, September 25, 2026.
Too Big Arrow Icon
Sources are mostly out of (0)

Similar News Topics

News
Feed Dots Icon
For You
Search Icon
Search
Blindspot LogoBlindspotLocal