Laboratory Corporation of America Holdings (LabCorp) notified South Carolina residents that its third-party vendor, American Medical Collection Agency (AMCA), experienced unauthorized access to its web payment system between August 1, 2018, and March 30, 2019. LabCorp's own systems were not affected. The breach potentially exposed patient names, addresses, balances, dates of birth, referring physicians, dates of service, health insurance information, and Social Security Numbers. LabCorp stopped using AMCA immediately upon notification and offered two years of Experian IdentityWorks to affected individuals.