← Back to Feed
Labcorp to overhaul data security practices, pay $2.3 million fine for cybersecurity failings
September 25, 2026 · The Record · Severity: MEDIUM
Security changes include creating an incident response plan for vendor security failings, limiting how much data Labcorp shares with vendors and building an expansive risk management team charged with tracking vendors’ compliance with data security practices.
Key Takeaways
- Labcorp has agreed to overhaul its data security practices and pay $2.3 million following a data breach that exposed sensitive healthcare information.
- The settlement underscores the regulatory and financial consequences of inadequate healthcare data protection and the importance of robust security programs.
- Healthcare organizations should review their data security practices against regulatory requirements to avoid similar enforcement actions and penalties.