American Medical Collection Agency
Disclosed Jun 3, 20197 years ago21,000,000 affectedSettled
2019 debt collector breach exposed up to 21M people; 41-state AG agreement
The 2019 breach of medical debt collector AMCA exposed Social Security numbers, payment card data and in some cases test names and diagnostic codes of up to 21 million people, including patients of labs such as Labcorp. AMCA reached an agreement with 41 attorneys general in 2021, and Labcorp paid about USD 2.3M to 44 states in 2026.
What is known
| People affected | 21,000,000 (as reported by the organization) |
|---|---|
| Disclosed | Jun 3, 2019 |
| Attack | Hacking |
| Data exposed | Social Security numbers, Payment cards, Names, Health |
| Sector | Finance · US |
| Status | Settled |
| Lawsuit or fine | 41-state AG agreement with AMCA (March 2021); about USD 2.3M Labcorp multistate settlement (Sept 2026) (about $2.3M) |
Sources
| Source | |
|---|---|
| NY AG: AMCA held responsible for 2019 data breachag.ny.gov · Regulator | Regulator |
| NY AG: USD 2.3 Million and reforms after Labcorp data breachag.ny.gov · Regulator | Regulator |
| Quest Diagnostics says 11.9 million patients affected by data breachtechcrunch.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jun 3, 2019 | 21,000,000 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.