LABCORP HOLDINGS INC.

LabCorp reported to HHS on 2023-09-08 an unauthorized access/disclosure affecting 1,431 individuals. An employee impermissibly disclosed PHI—including names, dates of birth, addresses, lab results, and treatment information—to wrong recipients via paper/films. The CE notified HHS, affected individuals, and media, and provided credit monitoring and implemented additional safeguards.

Labcorp inadvertently faxed patient lab results, names, DOBs, addresses, and medical record numbers to incorrect recipients between July 9-11, 2023. Discovered July 10, 2023. Labcorp notified the unintended recipient, requested destruction of data, and offered one year of Experian IdentityWorks. No financial or SSN data was involved.

Personal Genome Diagnostics Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-07-20. 2 Massachusetts residents were affected. The report records the breach type as electronic.

Center for Disease Detection, LLC reported to HHS on 2021-04-21 a Unauthorized Access/Disclosure affecting 2436 individuals. Breached information located on Email. An unauthorized third party obtained access to a CD containing PHI including names and laboratory tests.

OmniSeq, Inc. reported to HHS on 2019-11-21 a Hacking/IT Incident affecting 3,977 individuals. Breached information located on Email. An employee was victim of an email phishing scheme exposing ePHI including names, DOBs, diagnoses, SSNs, and addresses. The entity notified HHS, individuals, media, and law enforcement, and retrained staff.

Laboratory Corporation of America Holdings reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-07-17. 750 Massachusetts residents were affected. The report records the breach type as electronic.

Laboratory Corporation of America Holdings (LabCorp) reported a data breach to the Oregon Attorney General. The breach was reported on 2019-07-17. The breach occurred during 8/1/2018 - 3/30/2019. The breach was discovered on 5/14/2019. Notice was sent on 7/13/2019.

LabCorp notified NH AG of a breach involving its vendor AMCA. Unauthorized access occurred Aug 2018–Mar 2019. LabCorp learned of the incident on May 14, 2019. 303 NH residents affected. Data included names, addresses, DOBs, SSNs, and health/financial info. Notices sent July 13, 2019.

Laboratory Corporation of America Holdings (LabCorp) notified South Carolina residents that its third-party vendor, American Medical Collection Agency (AMCA), experienced unauthorized access to its web payment system between August 1, 2018, and March 30, 2019. LabCorp's own systems were not affected. The breach potentially exposed patient names, addresses, balances, dates of birth, referring physicians, dates of service, health insurance information, and Social Security Numbers. LabCorp stopped using AMCA immediately upon notification and offered two years of Experian IdentityWorks to affected individuals.

LabCorp notified California residents that its vendor, American Medical Collection Agency (AMCA), experienced unauthorized access to its web payment page between August 1, 2018, and March 30, 2019. LabCorp was informed on May 14, 2019. Affected data may include names, addresses, phone numbers, dates of birth, referring physicians, dates of service, health insurance information, and potentially Social Security Numbers. LabCorp stopped using AMCA and offered two years of identity monitoring.