LABORATORY CORPORATION OF AMERICA HOLDINGS

LabCorp reported to HHS on 2023-09-08 an unauthorized access/disclosure affecting 1,431 individuals. An employee impermissibly disclosed PHI—including names, dates of birth, addresses, lab results, and treatment information—to wrong recipients via paper/films. The CE notified HHS, affected individuals, and media, and provided credit monitoring and implemented additional safeguards.

Laboratory Corporation of America Holdings reported a data breach to the Montana Attorney General. The breach was reported on 2023-09-08. The breach occurred from 7/9/2023 to 7/11/2023. 8 Montana residents were affected.

Laboratory Corporation of America Holdings (LabCorp) reported a data breach to the Oregon Attorney General. The breach was reported on 2019-07-17. The breach occurred during 8/1/2018 - 3/30/2019. The breach was discovered on 5/14/2019. Notice was sent on 7/13/2019.

Laboratory Corporation of America Holdings (LabCorp) notified South Carolina residents that its third-party vendor, American Medical Collection Agency (AMCA), experienced unauthorized access to its web payment system between August 1, 2018, and March 30, 2019. LabCorp's own systems were not affected. The breach potentially exposed patient names, addresses, balances, dates of birth, referring physicians, dates of service, health insurance information, and Social Security Numbers. LabCorp stopped using AMCA immediately upon notification and offered two years of Experian IdentityWorks to affected individuals.

Laboratory Corporation of America Holdings (LabCorp) reported a third-party breach involving its vendor, American Medical Collection Agency (AMCA). LabCorp was notified on May 14, 2019, that AMCA experienced unauthorized access to its web payment system between August 1, 2018, and March 30, 2019. LabCorp's own systems were not affected. The incident exposed patient names, addresses, phone numbers, dates of birth, referring physicians, dates of service, health insurance information, and potentially Social Security Numbers. LabCorp stopped sending requests to AMCA and offered 2 years of Experian IdentityWorks to affected individuals.

Laboratory Corporation of America Holdings dba LabCorp reported to HHS on 2019-07-13 a Hacking/IT Incident affecting 10,251,784 individuals. The breach involved its business associate, Retrieval-Masters Creditors Bureau, Inc. (AMCA), which suffered a cyber-attack exposing patient PHI (names, SSNs, health info) stored on network servers. LabCorp notified HHS, individuals, and media, and terminated its relationship with AMCA.

Laboratory Corporation of America Holdings (LabCorp), a health sector entity reported a unclear/unknown incident to the Washington Attorney General. The organization became aware of the incident on 2019-05-14 and filed notice on 2019-07-13. 18,330 Washington residents were affected. 60 days elapsed between awareness and notification. 286 days to identify the breach. 0 days to contain the breach.

Laboratory Corporation of America Holdings (LabCorp) reported a data breach to the Montana Attorney General. The breach was reported on 2019-07-13. The breach occurred from 8/1/2018 to 3/30/2019. 4,823 Montana residents were affected.

Laboratory Corporation of America (LabCorp) reported to HHS on 2013-05-01 a Theft affecting 1,580 individuals. A desktop computer tagged for destruction was stolen after hours from a LabCorp facility. The computer contained ePHI including diagnoses, names, Social Security numbers, and dates of birth. LabCorp notified HHS, affected individuals, and law enforcement, initiated an internal investigation, retrained employees, changed device storage locations, and updated desktop encryption.

Laboratory Corporation of America reported to HHS on 2010-04-01 a theft affecting 2773 individuals. An external hard drive containing electronic protected health information was stolen. The breached information included names, medical record numbers, dates of birth, lab test data, and some Social Security numbers. In response, the company has initiated a project to encrypt external hard drives and other media.