Public case informationLast updated

Labcorp AMCA Data Breach Settlement

Labcorp · Patient information provided to American Medical Collection Agency · Settlement Reached

About this case

Laboratory Corporation of America Holdings agreed to pay $35 million to resolve claims arising from a cyberattack on American Medical Collection Agency, a billing and collections vendor that received certain Labcorp patient information. The matter reached a settlement, with claims due by September 3, 2026.

Case overview

Defendant company
Labcorp
Product or service
Patient information provided to American Medical Collection Agency
Court case number
19-md-2904
Case status
Settlement Reached
Lawsuit type
Privacy
Reported harm
Data Breach

Important dates

Labcorp AMCA data breach settlement claim

Participation information

Labcorp AMCA data breach settlement claim

Individuals for whom Labcorp transmitted personal information to Retrieval-Masters Creditor’s Bureau, Inc., doing business as American Medical Collection Agency, and whose information was contained in systems involved in the AMCA cybersecurity incident occurring approximately August 2018 through March 2019.

A claimant had to submit a valid Claim Form online through the official administrator form or mail a completed and signed paper Claim Form to: American Medical Collection Agency, Inc. Customer Data Security Breach Litigation—Labcorp Settlement, c/o Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324. Online submissions and mailed forms were due by 2026-09-03; the online form now reports that its deadline has passed.

Type
Settlement Claim
Status
Deadline passed
Total settlement amount
$35,000,000
Amount per claim
$50
Payout
Eligible claimants could choose either an Alternative Cash Payment explicitly stated as $50 per valid claimant, subject to pro rata adjustment, or reimbursement of documented, unreimbursed out-of-pocket losses up to $5,000 per person, also subject to pro rata adjustment. Claimants could additionally elect up to two years of medical and healthcare information monitoring services. The $50 option was available instead of the documented-loss option.
Reported proof requirement
Unclear

Sources