Labcorp AMCA Data Breach Settlement: What It Means for Your Credit

Does the Labcorp settlement affect your credit?

The $35 million Labcorp settlement doesn't change your credit report, and filing a claim wouldn't have either. The risk sits in the data that leaked: Social Security numbers in the wrong hands can be used to open accounts in your name. The settlement's claim deadline of September 3, 2026 has passed, but a credit freeze or fraud alert still works today, and both are free.

Below: what happened, what the settlement offered, and the steps worth taking now. We write about credit reports, so we'll stay on that side of the story. For legal questions about the case, go to the settlement administrator or the court docket.

What happened in the AMCA breach

American Medical Collection Agency (AMCA) was a third-party medical debt collector. Hackers got into its systems, and (https://www.techtarget.com/healthtechsecurity/news/366644474/Labcorp-reaches-35M-settlement-over-American-Medical-Collection-Agency-breach), the breach affected more than 21 million people, including more than 10 million Labcorp patients. The exposed data included Social Security numbers, payment information, and medical test and diagnostic codes.

Why a collection agency held your data

Labs and hospitals often hand unpaid bills to collection agencies and share patient details so the agency can find and contact the debtor. That's how a lab patient ended up in the files of a company they'd never heard of. The breach ran from roughly August 2018 to March 2019, and AMCA filed for Chapter 11 bankruptcy afterward.

What Labcorp said

The plaintiffs alleged negligence and breach of contract. Labcorp denied the allegations, and the settlement resolves the claims without any admission of liability. Claims against AMCA and other defendants, including Quest Diagnostics, Sunrise Medical Laboratories and CBL Path, were still ongoing when ClassAction.org covered the settlement.

What the Labcorp settlement offered

The case, In re: American Medical Collection Agency, Inc. Customer Data Security Breach Litigation, was heard in the U.S. District Court for the District of New Jersey. Class members could choose from these benefits:

• Documented losses: up to $5,000 for identity theft, fraud and out-of-pocket costs such as credit monitoring, legal services, notary fees and postage. Receipts were required. The documented-loss option also covered up to 10 hours of lost time at $25 an hour.
• Alternative cash payment: an estimated $50 with no proof needed. Both cash options could be reduced pro rata depending on how many valid claims came in.
• Monitoring: two years of medical information monitoring and identity theft insurance for all class members.

The dates, and how to check status

Preliminary approval came on April 21, 2026. The final approval hearing was scheduled for August 20, 2026, and the claim deadline was September 3, 2026. Payments only begin after final approval and the resolution of any appeals. The sources we reviewed don't confirm the outcome of the hearing, so we can't tell you whether payments have started. Check the settlement website named on your notice, or the court docket, for the current status.

If you missed the deadline, don't pay anyone who offers to "reopen" your claim. Settlement-related scams are common after a high-profile case.

Why a medical-vendor breach is a credit problem

Your Social Security number is the key

Under the Fair Credit Reporting Act (FCRA), lenders pull your credit file to decide on new accounts, and your Social Security number is the identifier that ties applications to files. A thief with your number and name can try to open cards, loans or phone accounts. Those accounts then show up on your report, unpaid. They drag down your score until you get them removed.

Medical data, collections and your credit

Medical information adds a second angle. Fraudulent medical bills can land with collectors and look like real debts. Our guide on (/medical-debt-credit-report-cfpb-rule-vacated/) covers what currently protects you, and why a bill you don't recognize deserves a closer look rather than a quick payment.

Freeze or fraud alert: pick your protection

The FTC explains both tools in its guide on (https://consumer.ftc.gov/credit-freeze-or-fraud-alert-right-you).

Credit freeze

A freeze blocks new creditors from seeing your file. It's free to place and lift, it lasts until you remove it, and it doesn't affect your credit score. You have to contact each of the three bureaus (Equifax, Experian and TransUnion) separately. You'll get a PIN or password for lifting it when you apply for credit yourself. If you're unsure how a freeze compares to the bureaus' lock products, see (/credit-freeze-vs-credit-lock-difference/).

Fraud alert

A fraud alert tells businesses to verify your identity before opening new credit. It's free, and you place it with just one bureau, which must notify the other two. An initial alert lasts one year. People who have been victims of identity theft can get an extended alert that lasts seven years.

What neither one stops

A freeze doesn't stop someone from taking over an account you already have, as the CFPB's identity theft guidance points out. So read your card and bank statements, and pull your free reports at annualcreditreport.com to look for accounts you don't recognize.

If you find fraud

Report it and build your paper trail

Report the theft at IdentityTheft.gov. You'll get an Identity Theft Report and a recovery plan. Close the affected accounts, contact the fraud departments of the companies involved, and consider a report to local police. Our (/identity-theft-recovery-checklist-7-steps/) walks through the order of operations.

Remove the fraudulent items

To get fraudulent debts off your reports, send each bureau your Identity Theft Report, proof of your identity and a letter listing the fraudulent items. The CFPB says to use this process only for debts caused by identity theft. For ordinary errors, use the standard dispute process. If the damage is bigger, the 12-month identity theft recovery roadmap covers rebuilding afterward.

Watch for impersonators, too. Scammers pose as the FTC, the CFPB, banks or law enforcement after breaches. Reach those organizations only through their official websites and phone numbers.

What to do this week

The settlement money was always small next to the risk: roughly $50 for most claimants, against months of cleanup if someone opens a credit line in your name. Place a freeze at all three bureaus, pull your reports, and set a reminder to check them again. If your file already has problems and you want help sorting them out, (/#top-companies) among the credit repair companies we review.

Frequently Asked Questions

Can I still file a claim in the Labcorp AMCA settlement?

The published claim deadline was September 3, 2026, which has passed. Check the settlement administrator's website or the court docket for the current status.

Does a data breach settlement hurt my credit score?

No. Claiming or receiving settlement benefits doesn't appear on your credit reports. Only fraud that uses your information can affect your file.

Does a credit freeze affect my credit score?

No. According to the FTC, a freeze doesn't affect your score. It's free and lasts until you remove it.

How long does a fraud alert last?

An initial fraud alert lasts one year. Identity theft victims can get an extended alert lasting seven years with an Identity Theft Report.