Labcorp Data Breach Class Action Lawsuit
Labcorp patients say the company failed to protect personal and health information it sent to its collections vendor AMCA, which was hacked in 2018–2019. Labcorp denies the claims.
What happens next with the Labcorp Data Breach settlement
The claim deadline passed on August 31, 2026. New claims for this settlement are no longer being accepted.
The court approved the settlement on August 20, 2026. Payments are sent once that approval is final: after the time for anyone to appeal it runs out, or after any appeal ends.
Then the payments go out. The settlement administrator, the firm the court appointed to process claims, sends payments to eligible claimants once it has reviewed the claims. How long that takes varies from one settlement to the next.
Filed this claim with Chimo? The status of your claim is on the claims page in your account.
Settlements you can still claim in November 2026
Jefferson-Blount-St. Clair Mental Health Authority
$100
UFCW Local 7
$50
Wayne Memorial Hospital
$25
Labcorp Data Breach Class Action Lawsuit
Labcorp patients sued Laboratory Corporation of America Holdings ("Labcorp") in 2019, saying it failed to protect personal and medical information it had handed to a vendor whose systems were then hacked. Labcorp denies the claims, and the court did not decide who was right. The Labcorp data breach case centers on American Medical Collection Agency (AMCA), a debt-collection firm Labcorp hired to pursue delinquent accounts. Between roughly August 1, 2018, and March 30, 2019, hackers infiltrated AMCA's computer systems, accessing the personally identifiable and protected health information of Labcorp patients. AMCA discovered the intrusion, notified Labcorp in May 2019, and collapsed into bankruptcy that June.
Patients across the country filed suit, alleging Labcorp was negligent in safeguarding their data by entrusting it to AMCA. The Judicial Panel on Multidistrict Litigation consolidated the cases in the District of New Jersey on August 9, 2019, organizing them into three tracks — Quest/Optum, Labcorp, and Other Labs — with a master consolidated complaint filed against Labcorp on November 15, 2019. After six years of hard-fought litigation, motions to dismiss, expert discovery, and a full-day mediation before retired Magistrate Judge Diane M. Welsh, the parties reached this settlement, which the court approved on August 20, 2026. The class is represented by James E. Cecchi (Carella, Byrne, Cecchi, Brody & Agnello), Linda P. Nussbaum (Nussbaum Law Group), and Stuart A. Davidson (Robbins Geller Rudman & Dowd), under case number 19-md-2904.
Labcorp Data Breach Class Action Settlement - $35,000,000
Labcorp agreed to a $35,000,000 non-reversionary settlement fund to resolve claims that it failed to protect patient data exposed in the AMCA security incident. The Labcorp settlement covers anyone whose information Labcorp transmitted to AMCA and that sat in the systems hit by the 2018–2019 cyberattack — a class the plaintiffs describe as numbering in the millions. The claim deadline was September 3, 2026. New claims can no longer be filed.
The single fund covers every cost of the settlement: class member payments, two years of medical monitoring, notice and administration handled by Kroll, taxes, service awards, and attorneys' fees. Because nothing reverts to Labcorp, money not spent on fees and costs goes to class members. The per-person cash amount adjusts up or down on a pro rata basis depending on the total of valid claims. Class members who did nothing stay bound by the settlement but receive no payment, and they have given up the right to sue Labcorp over the breach. Anyone who wanted to keep that right had to opt out by July 27, 2026. The court granted final approval on August 20, 2026, and awarded class counsel $11.9 million in fees plus $2,813,558.90 in costs.
Claims closed: August 31, 2026
Labcorp AMCA Data Breach Class Action Payout: $50 with no documentation
How much could class members claim from the Labcorp data breach settlement? Class members could choose one of two cash options. The alternative cash payment was an estimated $50 per person with no documentation required — the simplest path, subject to pro rata adjustment depending on how many people filed. Alternatively, those who could document harm could claim up to $5,000 in out-of-pocket losses fairly traceable to the breach: unreimbursed fraud or identity-theft costs, credit-monitoring fees paid since August 1, 2018, professional fees, and up to 10 hours of lost time reimbursed at $25 per hour. Either way, class members could also claim two years of CyEx Medical Shield Pro medical and healthcare information monitoring at no cost to them.
The court granted final approval on August 20, 2026. Payments are made to eligible claimants after any appeals are resolved, so a payout date was not fixed. Out-of-pocket claims required receipts or similar proof — handwritten or self-prepared documents alone wouldn't qualify. If you have moved or have a question about a payment, contact Kroll, the settlement administrator, at 1-833-447-6786, or check the official settlement website for status updates.
Healthcare Data Breach Class Action Settlements
Labcorp AMCA Data Breach Class Action Eligibility
You may have been a Labcorp data breach class action claimant if you were an individual whose personal information Labcorp transmitted to American Medical Collection Agency and whose data was contained in the AMCA computer systems hit by the cyberattack between roughly August 2018 and March 2019. Notably, the class wasn't defined by being a Labcorp customer in general — it turned specifically on whether your account was ever routed to AMCA for collections, so people who always paid on time may not have been covered even if they used Labcorp.
FAQ
Labcorp didn't suffer the hack directly. Its debt-collection vendor, AMCA, was breached between August 2018 and March 2019, exposing patient data Labcorp had handed over to chase unpaid bills.
AMCA was the breached company and the common thread across many lab clients. The court grouped all the lawsuits into one multidistrict litigation, then split it into tracks — this is the Labcorp Track.
It didn't survive. After discovering the intrusion and notifying clients in May 2019, AMCA filed for bankruptcy protection in June 2019.
Class members could claim an estimated $50 alternative cash payment with no documentation. The exact figure floated up or down pro rata depending on how many valid claims were filed.
Documented losses traceable to the breach: fraud and identity-theft costs, credit-monitoring fees paid since August 1, 2018, professional fees, and up to 10 hours of lost time at $25 per hour — but receipts were required.
It's a medical and healthcare-information monitoring service. Class members who submitted a valid claim for it could enroll for two years at no cost to them, on top of choosing a cash benefit — a benefit tailored to a breach involving health data, not just financial data.
Class counsel asked for up to 34% of the $35 million fund. On August 20, 2026, the court awarded $11,900,000 in attorneys' fees and $2,813,558.90 in costs, plus a $5,000 service award to each settlement class representative.
About six years. Lawsuits began after Labcorp's mid-2019 notices, were consolidated in New Jersey in August 2019, and only resolved after a full-day mediation in November 2025.
The court granted final approval on August 20, 2026. Payments are made to eligible claimants after any appeals are resolved, so there was no fixed payout date.
Claimants generally didn't have to prove it. Labcorp's records already identified whose data went to AMCA, so the administrator would match each claim against that class list — using the claimant's name, contact details, and the Notice ID number on their notice.
Sources
These are the court's own records for this case. They are hosted here unchanged, so you can check anything on this page against the documents themselves.
- Labcorp AMCA Data Breach Class Action Declaration of James E. Cecchi, with the Settlement Agreement as Exhibit 1 (PDF) Settlement agreement · Filed March 13, 2026 · U.S. District Court, District of New Jersey (Newark) · Case 19-md-2904 (JKS)(MAH), MDL 2904
- Labcorp AMCA Data Breach Order Granting Preliminary Approval of Class Action Settlement (Labcorp Track) (PDF) Court order · Filed April 21, 2026 · U.S. District Court, District of New Jersey (Newark) · Case 19-md-2904 (JKS)(MAH), MDL 2904
- Labcorp AMCA Data Breach Class Action Final Approval Order and Judgment (Labcorp Track) (PDF) Court order · Filed August 20, 2026 · U.S. District Court, District of New Jersey (Newark) · Case 19-md-2904 (JKS)(MAH), MDL 2904
The full case file is on the court docket: view the docket.