# Labcorp multistate data breach settlement

> Live situation record from CLSTR: https://clstr.news/situations/labcorp-multistate-data-breach-settlement
> Updated: 2026-09-27T10:00:00.000Z. Sources: 6. Developments: 2.

Labcorp has agreed to a $2.3 million multistate settlement to resolve investigations into a 2019 data breach. The breach occurred at the company’s former debt collection vendor, the American Medical Collection Agency (AMCA), between August 2018 and March 2019.

The incident compromised the personal and medical information of approximately 27.5 million Americans, including roughly 10.2 million Labcorp patients. Exposed data included names, Social Security numbers, payment card information, and specific medical tests.

As part of the settlement involving a bipartisan coalition of 44 attorneys general, Labcorp must implement reforms to enhance consumer protection. These measures include revamping data security policies, strengthening vendor oversight, expanding its information security program, and establishing new data-sharing protocols for third-party debt collectors to minimize data exposure.

## Timeline

### 2026-09-27: Labcorp reaches $2.3 million settlement over data breach

Labcorp has agreed to a $2.3 million multistate settlement following a 2019 data breach at its debt collector that exposed the personal information of millions of patients.

3 sources. https://clstr.news/cluster/labcorp-reaches-23-million-settlement-over-data-breach

### 2026-09-24: Labcorp settles multistate data breach for $2.3 million

Labcorp will pay a $2.3 million multistate settlement following a 2019 data breach at a debt collection vendor that exposed the personal and medical information of millions of Americans.

4 sources. https://clstr.news/cluster/labcorp-settles-multistate-data-breach-for-23-million

---
Cite as: Labcorp multistate data breach settlement. CLSTR, https://clstr.news/situations/labcorp-multistate-data-breach-settlement