LABCORP HOLDINGS INC.

LabCorp reported to HHS on 2023-09-08 an unauthorized access/disclosure affecting 1,431 individuals. An employee impermissibly disclosed PHI—including names, dates of birth, addresses, lab results, and treatment information—to wrong recipients via paper/films. The CE notified HHS, affected individuals, and media, and provided credit monitoring and implemented additional safeguards.

Laboratory Corporation of America Holdings reported a data breach to the Montana Attorney General. The breach was reported on 2023-09-08. The breach occurred from 7/9/2023 to 7/11/2023. 8 Montana residents were affected.

OmniSeq, Inc. reported to HHS on 2019-11-21 a Hacking/IT Incident affecting 3,977 individuals. Breached information located on Email. An employee was victim of an email phishing scheme exposing ePHI including names, DOBs, diagnoses, SSNs, and addresses. The entity notified HHS, individuals, media, and law enforcement, and retrained staff.

Laboratory Corporation of America Holdings (LabCorp) reported a data breach to the Oregon Attorney General. The breach was reported on 2019-07-17. The breach occurred during 8/1/2018 - 3/30/2019. The breach was discovered on 5/14/2019. Notice was sent on 7/13/2019.

Laboratory Corporation of America Holdings (LabCorp) reported a third-party breach involving its vendor, American Medical Collection Agency (AMCA). LabCorp was notified on May 14, 2019, that AMCA experienced unauthorized access to its web payment system between August 1, 2018, and March 30, 2019. LabCorp's own systems were not affected. The incident exposed patient names, addresses, phone numbers, dates of birth, referring physicians, dates of service, health insurance information, and potentially Social Security Numbers. LabCorp stopped sending requests to AMCA and offered 2 years of Experian IdentityWorks to affected individuals.

Laboratory Corporation of America Holdings dba LabCorp reported to HHS on 2019-07-13 a Hacking/IT Incident affecting 10,251,784 individuals. The breach involved its business associate, Retrieval-Masters Creditors Bureau, Inc. (AMCA), which suffered a cyber-attack exposing patient PHI (names, SSNs, health info) stored on network servers. LabCorp notified HHS, individuals, and media, and terminated its relationship with AMCA.

Laboratory Corporation of America Holdings (LabCorp), a health sector entity reported a unclear/unknown incident to the Washington Attorney General. The organization became aware of the incident on 2019-05-14 and filed notice on 2019-07-13. 18,330 Washington residents were affected. 60 days elapsed between awareness and notification. 286 days to identify the breach. 0 days to contain the breach.

Laboratory Corporation of America Holdings (LabCorp) reported a data breach to the Montana Attorney General. The breach was reported on 2019-07-13. The breach occurred from 8/1/2018 to 3/30/2019. 4,823 Montana residents were affected.

Laboratory Corporation of America (LabCorp) reported to HHS on 2013-05-01 a Theft affecting 1,580 individuals. A desktop computer tagged for destruction was stolen after hours from a LabCorp facility. The computer contained ePHI including diagnoses, names, Social Security numbers, and dates of birth. LabCorp notified HHS, affected individuals, and law enforcement, initiated an internal investigation, retrained employees, changed device storage locations, and updated desktop encryption.