Money, explained for the rest of us.

Get our free daily email →

Labcorp patients have until September 3 to take $50 from a $35 million breach settlement

By

September 3 is roughly five weeks out, and it is the entire story here. A settlement fund exists, a payment option requires no records at all, and the eligible group is enormous — but every part of that becomes irrelevant to anyone who files on September 4.

The deadline and the two ways to claim

The case is In re American Medical Collection Agency Customer Data Security Breach Litigation, No. 19-md-2904, in the U.S. District Court for the District of New Jersey. The Labcorp track carries a $35,000,000 fund. Claim forms must be submitted online or postmarked no later than September 3, 2026.

Two payment routes are available. The first is an alternative cash payment of $50, which requires completing the claim form and nothing further — no receipts, no records, no proof of loss. The second is reimbursement of up to $5,000 in documented out-of-pocket losses traceable to the breach, which can include up to 10 hours of time valued at $25 per hour spent dealing with the consequences.

Both options are subject to pro rata adjustment, meaning the final amount can move up or down depending on how many valid claims arrive. Class members are also offered two years of medical and healthcare information monitoring, which is worth taking whichever cash option is selected.

One documentation rule catches people: self-prepared or handwritten receipts alone are not sufficient proof for the documented-loss route. Bank statements, invoices and correspondence are.


Free retirement updates: Refunds, consumer protections, and benefit deadlines are useful only when people know they exist. The free Retirement Shield newsletter tracks the legitimate ones. Join free.

Who is in the class, and why the number is so large

The breach did not happen at Labcorp. American Medical Collection Agency — operating as Retrieval-Masters Creditor’s Bureau — was Labcorp’s billing vendor, and its systems were compromised for roughly seven months, from approximately August 2018 through March 2019. Personal and health information belonging to Labcorp patients that had been transmitted to AMCA was exposed.

That vendor relationship is why the eligible population is so much larger than people assume. A patient did not need to have a dispute, a collections account, or any memory of AMCA. Routine bloodwork at a Labcorp draw station during that window — the kind ordered at an annual physical — was enough for billing data to have flowed to the vendor.

The practical implication for older households is direct. Anyone managing a chronic condition in 2018 and 2019 was likely getting labs several times a year, at exactly the volume that makes inclusion probable. Confirming eligibility is a matter of checking the court-approved settlement administrator’s site, run by Kroll Settlement Administration.

What a claim is and is not worth

Fifty dollars for a form that takes a few minutes is a good hourly rate, and it is worth stating plainly that the effort here is genuinely small relative to most settlements.

It is equally worth stating what filing gives up. Class members who do nothing lose the ability to sue Labcorp over this breach in the future — and that consequence has already attached, because the deadline to opt out or object passed on July 27, 2026. The only decision still open is whether to claim a payment or receive nothing while remaining bound. For virtually everyone, filing is the better of those two.

The documented-loss route deserves a look from anyone who actually spent money — a credit freeze fee, an identity theft service purchased in response, hours spent on the phone with a bank after fraudulent activity. Ten hours at $25 is $250 before any out-of-pocket costs, which meaningfully exceeds the $50 default.

The approval step people misread

Language matters here, and most coverage of settlements gets it wrong. This is a proposed settlement pending final approval. The final fairness hearing is scheduled for August 20, 2026, before the court in Newark.

That means a claimant can claim a payment; it does not mean a claimant will receive one on a known date. Payment depends on final approval, and on the resolution of any appeals that follow. Class action payments routinely arrive many months after a claim deadline, and occasionally more than a year later. Nobody should treat this as money arriving in the fall.

The sequencing also explains something that confuses claimants: the claim window closes on September 3, two weeks after the August 20 hearing. Filing before the hearing is normal and correct.

How to avoid the fake version of this

Data breach settlements with large eligible populations generate impersonation attempts, and this one has an unusually broad target group. The rules that hold: the court-approved administrator never charges a fee to file, never requires a payment to release funds, and does not call people demanding banking details.

The administrator’s own site is the only authoritative source for the deadline, the eligibility definition and the claim form. Several aggregator sites currently carry incorrect details about this case — including at least one stating the wrong date for the fairness hearing — which is a useful reminder that the second-hand version of a settlement is often wrong in ways that matter. The date that governs is September 3, and it is on the administrator’s page.

This article was produced with AI assistance and reviewed by a human editor. Figures are linked to their primary sources; where a claim could not be verified from the public record, we say so.

More Financial Reading


Spotted an error? Tell us at [email protected]. We fix mistakes fast and in the open — see how we work on our standards page.

Get the money news that affects your wallet — free, every weekday morning.