
A class action lawsuit has been filed against Laboratory Corporation of America Holdings ("Labcorp") after the personal and medical information of its patients was exposed in a data breach at one of its vendors. The Labcorp data breach case centers on American Medical Collection Agency (AMCA), a debt-collection firm Labcorp hired to pursue delinquent accounts. Between roughly August 1, 2018 and March 30, 2019, hackers infiltrated AMCA's computer systems, accessing the personally identifiable and protected health information of Labcorp patients. AMCA discovered the intrusion, notified Labcorp in May 2019, and collapsed into bankruptcy that June.
Patients across the country filed suit, alleging Labcorp was negligent in safeguarding their data by entrusting it to AMCA. The Judicial Panel on Multidistrict Litigation consolidated the cases in the District of New Jersey on August 9, 2019, organizing them into three tracks — Quest/Optum, Labcorp, and Other Labs — with a master consolidated complaint filed against Labcorp on November 15, 2019. After six years of hard-fought litigation, motions to dismiss, expert discovery, and a full-day mediation before retired Magistrate Judge Diane M. Welsh, the parties reached this settlement. The class is represented by James E. Cecchi (Carella, Byrne, Cecchi, Brody & Agnello), Linda P. Nussbaum (Nussbaum Law Group), and Stuart A. Davidson (Robbins Geller Rudman & Dowd), under case number 19-md-2904.
Labcorp has agreed to a $35,000,000 non-reversionary settlement fund to resolve claims that it failed to protect patient data exposed in the AMCA security incident. The Labcorp settlement update covers anyone whose information Labcorp transmitted to AMCA and that sat in the systems hit by the 2018–2019 cyberattack — a class the plaintiffs describe as numbering in the millions. To claim a benefit, eligible class members must file by the September 3, 2026 deadline.
The single fund covers every cost of the settlement: class member payments, two years of medical monitoring, notice and administration handled by Kroll, taxes, service awards, and attorneys' fees. Because nothing reverts to Labcorp, money not spent on fees and costs flows back to claimants. As part of the resolution, payments are structured so that the more people who file, the more the per-person cash amount adjusts up or down on a pro rata basis. Class members who do nothing stay bound by the settlement but receive no payment, and they give up the right to sue Labcorp over the breach. Anyone who wants to keep that right must opt out by July 27, 2026. The court will weigh final approval at the Fairness Hearing on August 20, 2026.
How much will you get from the Labcorp data breach settlement? Class members choose one of two cash options. The Alternative Cash Payment is an estimated $50 per person with no documentation required — the simplest path, subject to pro rata adjustment depending on how many people file. Alternatively, those who can document harm may claim up to $5,000 in out-of-pocket losses fairly traceable to the breach: unreimbursed fraud or identity-theft costs, credit-monitoring fees paid since August 1, 2018, professional fees, and up to 10 hours of lost time reimbursed at $25 per hour. Either way, every class member may also enroll free in two years of CyEx Medical Shield Pro medical and healthcare information monitoring.
Payments go out only after the court grants final approval at the August 20, 2026 Fairness Hearing and any appeals are resolved, so a payout date isn't fixed yet. Out-of-pocket claims require receipts or similar proof — handwritten or self-prepared documents alone won't qualify. If you've moved or your payment doesn't arrive, contact Kroll, the settlement administrator, at 1-833-447-6786, or check the official settlement website for status updates.


You may be a Labcorp data breach class action claimant if you are an individual whose personal information Labcorp transmitted to American Medical Collection Agency and whose data was contained in the AMCA computer systems hit by the cyberattack between roughly August 2018 and March 2019. Notably, the class isn't defined by being a Labcorp customer in general — it turns specifically on whether your account was ever routed to AMCA for collections, so people who always paid on time may not be covered even if they used Labcorp.
Labcorp didn't suffer the hack directly. Its debt-collection vendor, AMCA, was breached between August 2018 and March 2019, exposing patient data Labcorp had handed over to chase unpaid bills.
AMCA was the breached company and the common thread across many lab clients. The court grouped all the lawsuits into one multidistrict litigation, then split it into tracks — this is the Labcorp Track.
It didn't survive. After discovering the intrusion and notifying clients in May 2019, AMCA filed for bankruptcy protection in June 2019, which is part of why patients pursued Labcorp instead.
You can claim an estimated $50 Alternative Cash Payment with no documentation. The exact figure floats up or down pro rata depending on how many valid claims are filed.
Documented losses traceable to the breach: fraud and identity-theft costs, credit-monitoring fees paid since August 1, 2018, professional fees, and up to 10 hours of lost time at $25/hour — but receipts are required.
It's a medical and healthcare-information monitoring service. Every class member can enroll free for two years, on top of choosing a cash benefit — a perk tailored to a breach involving health data, not just financial data.
Class counsel will request up to 34% of the $35 million fund (roughly one-third, about $11.9 million) for fees and expenses.
About six years. Lawsuits began after Labcorp's mid-2019 notices, were consolidated in New Jersey in August 2019, and only resolved after a full-day mediation in November 2025.
Not until after the Final Fairness Hearing on August 20, 2026 and the resolution of any appeals. There's no fixed payout date, since appeals can extend the timeline.
You generally don't have to prove it. Labcorp's records already identify whose data went to AMCA, so the administrator matches your claim against that class list — using your name, contact details, and the Notice ID number on your notice.