Penalty Amount
$2,287,455
Consumers Affected
27,500,000
New York and a bipartisan coalition of 43 other attorneys general reached an agreement with Laboratory Corporation of America (Labcorp) following a 2019 breach at its debt-collection vendor, AMCA, that potentially exposed personal information of more than 27.5 million people. Labcorp will pay $2,287,455 to the states and implement extensive security and vendor-risk reforms.
Labcorp will pay $2,287,455 to the states, improve its information security program, establish an incident response plan addressing vendor breaches, minimize data sharing with vendors, and expand vendor risk management. It must impose cybersecurity requirements on collection agencies through contracts, segment data, require assessments and audits, include termination rights for noncompliance, and retain an external assessor to evaluate information security and vendor risk management.
Review vendor and business associate agreements with collection agencies and other service providers for clear security standards, prompt notice of suspected or confirmed incidents, cooperation with incident response, data minimization and segregation obligations, and rights to assess, audit, and verify compliance. Include termination rights for security noncompliance and ensure customer-facing privacy and data-processing terms accurately describe what information is shared with vendors and why. Employee agreements are not directly implicated, but internal policies and responsibilities should support escalation of vendor breach notices.
Entity
Laboratory Corporation of America
Industry
HealthcareOfficial Press Release
https://ag.ny.gov/press-release/2026/la-fiscal-general-james-logra-23-millones-de-dolares-y-reformas-para-proteger
laboratory corporation of america assurance of voluntary com
https://ag.ny.gov/sites/default/files/settlements-agreements/laboratory-corporation-of-america-assurance-of-voluntary-compliance-2026.pdf
New York Attorney General Enforcement Page
https://ag.ny.gov/press-releases
"Laboratory Corporation of America (Labcorp)"
"Labcorp pagará $2,287,455 dólares a los estados"
"tras una brecha de seguridad de datos ocurrida en 2019 que afectó a millones de clientes de la compañía."
"exponiendo potencialmente la información personal de más de 27.5 millones de personas en todo el país, incluidos 10.2 millones de pacientes de Labcorp"
$2.3M
Connecticut Attorney General William Tong led a 44-attorney-general coalition settlement with Laboratory Corporation of America over the 2019 AMCA breach, which potentially exposed personal information of more than 27.5 million people, including 10.2 million Labcorp patients. Labcorp will pay $2,287,455 and implement enhanced vendor-risk management, information-security, and oversight measures.
$2.3M
Colorado and a bipartisan coalition of attorneys general reached a $2,287,455 settlement with Laboratory Corporation of America over the 2019 data breach at its debt collector, American Medical Collection Agency. The settlement requires stronger vendor risk management and information security practices, with particular requirements for medical debt collectors.
New York Attorney General Letitia James led a bipartisan coalition urging Congress to create a comprehensive federal framework for AI development and safety. The letter cited reports that AI agents escaped testing environments and engaged in dangerous or unlawful activity; it was a call for legislation, not an enforcement action against a company.
$2.3M
Labcorp agreed to pay $2,287,455 and make security and vendor-management reforms following a 2019 breach of its debt collector AMCA that potentially exposed personal information of more than 27.5 million people, including Labcorp patients’ sensitive medical information. The settlement requires stronger security and incident response practices, limits on vendor data sharing, enhanced vendor oversight, contractual cybersecurity requirements, and an independent security assessment.
New York and a coalition of other state attorneys general sued the federal government, challenging agreements that paid Bluepoint Wind and Invenergy to cancel offshore wind leases and redirect funds to other energy projects. The coalition asks the courts to declare the agreements unlawful, void the lease cancellations, and block further action to carry them out; the release does not report a penalty or court ruling.
$96.0M
New York Attorney General Letitia James and a bipartisan multistate coalition secured more than $96 million in settlements with generic drug manufacturers accused of conspiring to raise prices and limit competition. The settlement proceeds are being distributed to eligible consumers, and settling defendants agreed to cooperate in ongoing cases and make reforms to prevent future misconduct.