Labcorp to overhaul data security practices, pay $2.3 million fine for cybersecurity failings

Labcorp to overhaul data security practices, pay .3 million fine for cybersecurity failings
A bipartisan coalition of 44 state attorneys general settled a lawsuit against Labcorp for $2.3 million after a 2019 data breach tied to its vendor American Medical Collection Agency exposed the personal information of 10.2 million customers. The agreement requires Labcorp to overhaul vendor oversight, strengthen security controls, and improve incident response to prevent future breaches linked to third-party data handlers. #Labcorp #AmericanMedicalCollectionAgency #AMCA #LetitiaJames

Keypoints

  • Labcorp agreed to pay a $2.3 million fine to settle the lawsuit.
  • The breach stemmed from security failures at vendor American Medical Collection Agency.
  • About 10.2 million Labcorp customers and 27.5 million people nationwide were affected.
  • The settlement requires stronger vendor contracts, audits, and risk management controls.
  • Labcorp must also retain an independent expert and separate sensitive data shared with debt collectors.

Read More: https://therecord.media/labcorp-to-overhaul-security-practices-settlement