Breachesby GlyphAmerican Medical Collection Agency
Disclosed Jun 3, 201921,000,000 affectedSettled
2019 debt collector breach exposed up to 21M people; 41-state AG agreement
The 2019 breach of medical debt collector AMCA exposed Social Security numbers, payment card data and in some cases test names and diagnostic codes of up to 21 million people, including patients of labs such as Labcorp. AMCA reached an agreement with 41 attorneys general in 2021, and Labcorp paid about USD 2.3M to 44 states in 2026.
What is known
| People affected | 21,000,000 (as reported by the organization) |
|---|---|
| Disclosed | Jun 3, 2019 |
| Attack | Hacking |
| Data exposed | Social Security numbersPayment cardsNamesHealth |
| Sector | Finance · US |
| Status | Settled |
| Lawsuit or fine | 41-state AG agreement with AMCA (March 2021); about USD 2.3M Labcorp multistate settlement (Sept 2026) (about $2.3M) |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.