Techtarget Labcorp Settles $35M Class Action Over AMCA Data Breach Affecting Millions
Article Content
- •Labcorp's $35 million settlement addresses a breach affecting over 21 million individuals.
- •The breach occurred at AMCA, compromising sensitive data including Social Security numbers.
- •Affected individuals can claim up to $5,000 for documented losses or a $50 alternative payment.
Labcorp has reached a $35 million settlement in a class-action lawsuit related to a data breach at the American Medical Collection Agency (AMCA) that occurred from August 2018 to March 2019. The breach compromised sensitive personal information of over 21 million individuals, including more than 10 million Labcorp patients. Hackers accessed AMCA's systems, exposing Social Security numbers, payment information, and medical test codes. The lawsuit alleged negligence on Labcorp's part for failing to protect patient data through its third-party vendor. As part of the settlement, affected individuals can claim up to $5,000 for documented losses or a $50 alternative payment without proof. Additionally, class members will receive two years of medical information monitoring and identity theft insurance. The settlement received preliminary court approval on April 21, 2026, with a final approval hearing scheduled for August 20, 2026.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track American Medical Collection Agency in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…
Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…