Case Overview: Labcorp has agreed to a $35 million settlement to resolve class action litigation stemming from a 2018 data breach at billing vendor American Medical Collection Agency (AMCA).

Who Qualifies: Individuals whose personal or medical information was exposed in the AMCA data breach affecting Labcorp customers.

Estimated Payout: Amounts will vary depending on the number of valid claims submitted and the tier of harm documented.

Deadline: To be confirmed upon court approval — check the official settlement website for updates.

Labcorp Agrees to $35 Million Settlement Over 2018 AMCA Data Breach

Patients whose personal information was exposed in a 2018 data breach linked to Labcorp's former billing vendor may be eligible for compensation under a proposed $35 million class action settlement.

According to reporting by the HIPAA Journal, Labcorp has agreed to the settlement to resolve long-running litigation arising from a cybersecurity incident at American Medical Collection Agency (AMCA), a third-party debt collection and billing service the company used at the time.

What the Breach Involved

The AMCA breach, which the lawsuit alleges occurred in 2018, exposed sensitive personal and financial information belonging to patients of multiple healthcare companies — including Labcorp. According to the complaint, the compromised data potentially included names, dates of birth, addresses, phone numbers, dates of service, balance information, and in some cases, credit card and banking details.

The breach is believed to have affected millions of Labcorp patients, making it one of the more significant healthcare-adjacent data exposures in recent years. AMCA filed for bankruptcy shortly after the breach became public, following a cascade of lawsuits from multiple healthcare clients.

What You Could Receive

Under the proposed $35 million settlement, class members may be eligible to receive a cash payment. The amount each individual could receive will depend on the total number of valid claims filed and the level of documented harm. Individuals who can demonstrate out-of-pocket losses — such as fraudulent charges or costs associated with identity theft — may be eligible for higher compensation than those submitting claims based on exposure alone.

As with most large data breach settlements, individual payouts may be modest if claim volume is high.

Are You Eligible?

You may be eligible if you:

• Were a Labcorp patient whose data was processed by AMCA
• Had personal, financial, or medical information exposed in connection with the 2018 AMCA breach
• Received a notice of the breach from Labcorp or AMCA

Documentation needed: Eligibility requirements and proof-of-harm documentation will be detailed on the official settlement website. In many data breach settlements, claimants may submit without receipts but may need supporting documentation to claim higher-tier compensation.

How to File a Claim

Full claim-filing instructions, deadlines, and the official claim form will be available through the settlement administrator once the settlement receives court approval.

1. Monitor the official settlement website for claim filing to open
2. Complete the claim form with your personal information and relevant details about your exposure
3. Submit any supporting documentation if claiming out-of-pocket losses
4. File before the stated claim deadline

Details on the settlement website and claim deadline will be updated as the case progresses.

Background on the Litigation

The class action lawsuit stems from a cybersecurity attack on AMCA's web payment portal that, according to the complaint, went undetected for several months in 2018. Plaintiffs alleged that Labcorp failed to adequately vet and oversee its third-party vendor's data security practices, leaving patients' sensitive information vulnerable to unauthorized access.

Labcorp has not admitted wrongdoing as part of the proposed settlement. The company's agreement to resolve the litigation is a common outcome in class action cases, allowing defendants to avoid the uncertainty of trial while providing potential relief to affected consumers.

Important Dates

• Settlement announced: June 2026
• Court approval hearing: Pending
• Claim deadline: To be determined following court approval

Settlement: In re: American Medical Collection Agency, Inc. Customer Data Security Breach Litigation (Labcorp)

Court: To be confirmed

Settlement Amount: $35,000,000

Claim Deadline: TBD — pending court approval

Settlement Website: To be announced

Think you may have been affected by the AMCA data breach? Monitor this page and the official settlement website for claim filing updates as the case moves toward final approval. Questions? Share them in the comments below.