Laboratory Services Cooperative: Planned Parenthood Lab Settles Data Breach Case for $6.1 Million

Laboratory Services Cooperative Settles $6.1M Data Breach Lawsuit Over Planned Parenthood Patient Exposure

Laboratory Services Cooperative (LSC), a Washington-based diagnostic testing provider for Planned Parenthood, has agreed to a $6.1 million settlement in a class-action lawsuit stemming from a cyberattack in April 2025. The breach compromised the medical data of approximately 1.6 million individuals many of whom had no prior relationship with the company and never consented to their information being collected or stored.

The lawsuit, filed on July 17, 2025, in the U.S. District Court for the Western District of Washington, alleged that LSC failed to adequately safeguard patient data. The settlement, if approved, would resolve claims on behalf of the affected class members, though details of individual compensation remain undisclosed.

The case highlights the growing legal and financial risks for healthcare providers following cybersecurity incidents, particularly when sensitive data is exposed without direct patient consent. The breach underscores vulnerabilities in third-party diagnostic services and the broader implications for data privacy in the healthcare sector.

Source: https://news.bloomberglaw.com/business-and-practice/planned-parenthood-lab-settles-data-breach-case-for-6-1-million

Laboratory Corporation of America Holdings cybersecurity rating report: https://www.rankiteo.com/company/laboratory-corporation-of-america-holdings

"id": "LAB1784572085",
"linkid": "laboratory-corporation-of-america-holdings",
"type": "Breach",
"date": "4/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '1.6 million individuals',
                        'industry': 'Healthcare',
                        'location': 'Washington, USA',
                        'name': 'Laboratory Services Cooperative (LSC)',
                        'type': 'Diagnostic Testing Provider'}],
 'data_breach': {'number_of_records_exposed': '1.6 million',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High (health-related)',
                 'type_of_data_compromised': 'Medical data'},
 'date_detected': '2025-04',
 'date_publicly_disclosed': '2025-07-17',
 'description': 'Laboratory Services Cooperative (LSC), a Washington-based '
                'diagnostic testing provider for Planned Parenthood, has '
                'agreed to a $6.1 million settlement in a class-action lawsuit '
                'stemming from a cyberattack in April 2025. The breach '
                'compromised the medical data of approximately 1.6 million '
                'individuals, many of whom had no prior relationship with the '
                'company and never consented to their information being '
                'collected or stored.',
 'impact': {'brand_reputation_impact': 'Yes',
            'data_compromised': 'Medical data',
            'financial_loss': '$6.1 million settlement',
            'identity_theft_risk': 'Yes',
            'legal_liabilities': 'Class-action lawsuit'},
 'lessons_learned': 'The case highlights the growing legal and financial risks '
                    'for healthcare providers following cybersecurity '
                    'incidents, particularly when sensitive data is exposed '
                    'without direct patient consent.',
 'post_incident_analysis': {'root_causes': 'Failed to adequately safeguard '
                                           'patient data'},
 'references': [{'source': 'U.S. District Court for the Western District of '
                           'Washington'}],
 'regulatory_compliance': {'legal_actions': 'Class-action lawsuit'},
 'title': 'Laboratory Services Cooperative Settles $6.1M Data Breach Lawsuit '
          'Over Planned Parenthood Patient Exposure',
 'type': 'Data Breach'}