The New York Attorney General, together with 43 other state AGs, secured a $2.3 million settlement and mandated security reforms from Laboratory Corporation of America (Labcorp) following a 2019 breach that exposed personal and health data of over 27.5 million people. Labcorp must overhaul its information security program, limit data sharing with vendors, and expand vendor risk management, among other obligations.
Why it matters: The settlement forces Labcorp to adopt stronger data‑security and vendor‑risk controls, aiming to protect millions of consumers’ sensitive health information.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
