← Back

Wire · regulatory

Labcorp Settles Multistate Data Breach Investigation for $2.3 Million

Published

26 September 2026

Topic

regulatory

◆ Sectors

Healthtech Infrastructure

◆ Geography

United States

◆ Source

Read at hipaajournal.com →

◆ Verified

Fusion42 · 26 September 2026 · Fusion42 review

Labcorp agreed to pay $2.3 million to settle a multistate investigation into a 2019 data breach at its debt collection subsidiary AMCA, affecting over 27.5 million individuals and involving violations of HIPAA and state laws. The settlement requires Labcorp to implement strong information security measures, including appointing a Chief Information Security Officer and enhancing vendor risk management.

This Wire brief sits within Fusion42's coverage of Healthtech Infrastructure, and 4 sources have reported it between 24 Sep 2026 and 26 Sep 2026.

◆ ◆ The Wire takeaway

You must tighten your patient data controls and vendor oversight now that regulators are enforcing heavy penalties and demanding structured security programmes in healthcare. This settlement signals tougher scrutiny on how you manage third-party debt collectors and protect health information.

◆ Coverage

4 sources · first reported 24 Sep 2026 · latest 26 Sep 2026

◆ Related on Wire

◆ Topics

Healthtech Infrastructurehipaadata-breachhealthcare-compliancevendor-riskinformation-security