HIPAA Journal reports:
A $35,000,000 settlement has been agreed to resolve a long-running class action lawsuit against Labcorp over a 2018 cybersecurity incident at American Medical Collection Agency. Laboratory Corporation of America Holdings (Labcorp), a provider of diagnostic testing services, had contracted with a company called Retrieval-Masters Creditor’s Bureau, Inc., which does business as American Medical Collection Agency (AMCA), to collect outstanding payments for Labcorp’s services.
On May 14, 2019, AMCA notified Labcorp about a cybersecurity incident that resulted in unauthorized access to Labcorp patients’ protected health information. Hackers had access to AMCA’s systems between August 2018 and March 2019, and potentially viewed or obtained some of their protected health information. The data breach affected multiple AMCA clients and resulted in the exposure of the protected health information of more than 25 million individuals, including the data of 10,251,784 Labcorp patients.
Multiple class action lawsuits were filed in response to the data breach, which were consolidated into a single action – In Re: American Medical Collection Agency, Inc. Customer Data Security Breach Litigation – In the U.S. District Court for the District of New Jersey.
Read more at HIPAA Journal.
