Labcorp to Pay $2.3 Million After Data Breach Put 10.2 Million Patients at Risk

Labcorp will pay nearly $2.3 million to states and strengthen its vendor-security practices following an investigation into a 2019 breach that potentially affected 10.2 million Labcorp patients. JHVEPhoto/Shutterstock

Labcorp will pay nearly $2.3 million and overhaul how it protects patient information shared with outside vendors following a multistate investigation into a massive 2019 data breach.

The breach occurred at American Medical Collection Agency, or AMCA, a third-party medical debt collector used by Labcorp and other health care companies. It potentially exposed personal information belonging to more than 27.5 million people nationwide, including approximately 10.2 million Labcorp patients.