UnknownHealthcareLow

LABORATORY CORPORATION OF AMERICA HOLDINGS

bd_d4aa5c9a60867442 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 14, 2019

Filed

Jul 17, 2019

To disclose

9 weeks

Affected

Not disclosed

Linked

8 filings

Confidence

95%

Full breach record for LABORATORY CORPORATION OF AMERICA HOLDINGS →5 incidents on file

Laboratory Corporation of America Holdings (LabCorp) reported a data breach to the Oregon Attorney General. The breach was reported on 2019-07-17. The breach occurred during 8/1/2018 - 3/30/2019. The breach was discovered on 5/14/2019. Notice was sent on 7/13/2019.

J jump to incidentP pin to compareR raw source

Oregon clock✗ OR AG >45d9 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 286 days

discovery → filing · 9 weeks / 64 days

Aug 1, 2018

Begins

May 14, 2019

Discovered

Jul 17, 2019

Filed

This filing is one of 8 about the same incident.View merged incident

Part of Retrieval-Masters Creditors Bureau, Inc supply-chain incident (2019) — a supply-chain cascade affecting multiple organizations.View cascade →

A leak claim by samsam about this victim predates this filing by 368 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Massachusetts State AGbd_3d616b53be77be772019-07-17Verified by operator
New Hampshire State AGbd_0b3589b29539db7b2019-07-16 · +1dVerified
South Carolina State AGbd_af36a8d2ef2267392019-07-15 · +2dVerified by operator
California State AGbd_bb71fbf6fb9ef2682019-07-15 · +2dVerified

Show 3 more filings ↓up to 4d gap

HHS OCRbd_3372e6a02aca0a242019-07-13 · +4dVerified
Washington State AGbd_7826d26cbfc754222019-07-13 · +4dVerified
Montana State AGbd_eb0456665111f5592019-07-13 · +4dVerified by operator

Name: LABORATORY CORPORATION OF AMERICA HOLDINGS
norm: laboratory corporation of america
Domain: labcorp.com

Name: LABORATORY CORPORATION OF AMERICA HOLDINGS
norm: laboratory corporation of america
Domain: labcorp.com

Discovered: May 14, 2019
Breach occurred: Aug 1, 2018 – Mar 30, 2019
Undetected for: 286 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 13, 2019
Affected individuals: Not disclosed
Data types: —
Attack vector: Unknown

Time to disclose: 9 weeks(64 days from discovery to filing)
Compliance flags: OR AG >45dLeak >180d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

HHS OCRJul 13 · first

Washington State AGJul 13 · first

Montana State AGJul 13 · first

South Carolina State AG+2d

California State AG+2d

New Hampshire State AG+3d

Massachusetts State AG+4d

Oregon State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 17, 2019
Raw hash: cab050fa9ee9be3e7d75e3980794b463f96ade441e254707bedd5d658f2dc9fa

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityLABORATORY CORPORATION OF AMERICA HOLDINGS

Victim entityLABORATORY CORPORATION OF AMERICA HOLDINGS

Incidentdiscovered May 14, 2019

ComplianceOR AG >45d

Extraction provenanceno artifact recorded

Source provenancejustice.oregon.gov