DENVER — Colorado Attorney General Phil Weiser announced a $2.3 million national settlement with Laboratory Corporation of America, known as Labcorp, resolving an investigation into a major data breach, according to official findings released by the Colorado Attorney General's office.
The multistate agreement addresses state-level inquiries into the laboratory testing giant's data security practices following an incident that compromised consumer information. State officials led the coordinated regulatory effort to hold the clinical testing provider accountable for the breach.
Terms of the Multistate Resolution
Under the terms announced by Weiser, Labcorp will pay $2.3 million to resolve claims brought by participating state authorities. The enforcement action stemmed from an extensive review of how the company safeguarded sensitive consumer data prior to the security incident.
The settlement marks the conclusion of coordinated multistate scrutiny into the company's protective infrastructure. State attorneys general routinely investigate health care providers and diagnostic services when consumer data is exposed, aiming to ensure entities adhere to established data protection standards.
Scrutiny Over Consumer Data Protection
State regulators have intensified enforcement actions against major medical and diagnostic providers over network vulnerabilities and data mishandling. Clinical laboratories handle vast repositories of confidential consumer and medical files, making security compliance a primary focus for state law enforcement.
According to reporting by the Colorado Attorney General, the settlement establishes financial terms resolving the states' investigation into the exposure of consumer records, concluding the coalition's inquiry into the breach.
