Wire · regulatory
Labcorp settles with 44 states for $2.3M over data breach
◆ Sectors
◆ Geography
◆ Source
◆ Verified
Fusion42 · 25 September 2026 · Fusion42 review
Labcorp will pay $2.29 million to 44 states to settle investigations into a 2019 data breach at its former vendor, American Medical Collection Agency. As part of the settlement, Labcorp must improve its vendor risk management program by enhancing audits, reducing data sharing, and implementing a new incident response plan.
This Wire brief sits within Fusion42's coverage of Healthtech Infrastructure, and 4 sources have reported it between 24 Sep 2026 and 26 Sep 2026.
◆ ◆ The Wire takeaway
You must tighten vendor controls and limit shared data immediately or face similar multistate scrutiny and penalties. This settlement sets a precedent that federal and state regulators will hold healthcare firms accountable for third-party cybersecurity lapses.
◆ Coverage
4 sources · first reported 24 Sep 2026 · latest 26 Sep 2026
◆ Related on Wire
◆ Topics