INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Labcorp to Overhaul Data Security Practices After $2.3 Million Fine

| 2026-10-08 14:15 CRITICAL LOW DATA BREACH
Executive Summary
AI-generated
A data breach occurred in 2024 at Laboratory Services Cooperative, a nonprofit clinical laboratory based in Seattle, Washington. The entity behind the attack is unknown from this source alone; however, it affected approximately 1.6 million current and former patients and employees across 31 U.S. states. The attackers accessed the network, removing data including names, dates of birth, contact information, medical information, claims information, billing information, health insurance information, Social Security numbers, and other government-issued identifiers. The breach was discovered on October 27, 2024, with notification letters sent to affected individuals starting around April 10, 2025. A hacker had access to the network for an unknown duration before being detected. Laboratory Services Cooperative agreed to pay $6.1 million to settle data breach litigation arising from this incident.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope healthhealth
Incident Timeline
‎October 27, 2024
Threat actors used unauthorized network activity to target Laboratory Services Cooperative on October 27, 2024.
industry Health
tactic Data Breach
organisation Social Security
‎November 20, 2024
The Laboratory Services Cooperative agreed to pay $6.1 million to settle data breach litigation, with the funds allocated for reimbursement claims and cash payments to affected individuals.
industry Health
organisation The HHS’ Office for Civil Rights
organisation HIPAA Journal
organisation District Court
financial $6.1 Agrees
organisation OCR
financial $1,000 payments
‎April 10, 2025
The Laboratory Services Cooperative agreed to pay $6.1 million to settle a data breach litigation incident that occurred in April 2025.
industry Health
‎Oct 8, 2026
Laboratory Services Cooperative agreed to pay $6.1 million to settle a class action litigation stemming from its 2024 data breach affecting approximately 1,600 current patients in 31 U.S. states.
industry Health
tactic Data Breach
financial $6.1 Agrees
organisation Settle Data Breach Litigation Posted
organisation Laboratory Services Cooperative
organisation Planned Parenthood
general_metric 31 U.S. states
data_breach 2024 data breach
general_metric 1.6 current patients
‎2026/10/08
A bipartisan coalition of 44 state attorneys general settled a lawsuit against Labcorp in exchange for a $2.3 million fine and a promise of sweeping data security reforms following the 2019 data breach that impacted approximately 10.2 million customers.
organisation Laboratory Services Cooperative Agrees
organisation Settle Data Breach Litigation
financial $6.1 Agrees
financial $2.3 fine
organisation American Medical Collection Agency
organisation AMCA
organisation Labcorp
financial $21 fine
‎October 26, 2026
The Laboratory Services Cooperative agreed to pay $6.1 million as part of a settlement in data breach litigation by October 26, 2026.
industry Health
‎November 24, 2026
The Laboratory Services Cooperative agreed to pay $6.1 million as part of a settlement in data breach litigation, with claims filing deadline set for November 24, 2026.
industry Health
‎January 4, 2027
The Laboratory Services Cooperative agreed to pay $6.1 million as part of a settlement in data breach litigation, with claims filing and final fairness hearings scheduled for November 24, 2026, and January 4, 2027, respectively.
industry Health
Tactical Metrics
Metrics
financial
6,100,000
Financial Impact / Stolen Funds
Metrics
data_breach
2,024
Data Breach
Metrics
financial
1,000
Financial Impact / Stolen Funds
Metrics
financial
2,300,000
Fine
Metrics
financial
21,000,000
Fine