> ## Content Index
> Fetch the complete content index at: https://www.theamericanquorum.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Alaska Labcorp Settlement Covers 82,958 Residents After Vendor Breach
- URL: https://www.theamericanquorum.com/state-news-alaska-2026-09-26-b/
- Published: 2026-09-26T16:44:04.000Z
- Updated: 2026-09-26T16:44:04.000Z
- Description: Alaska joined a 44-state settlement requiring Labcorp to pay about $2.29 million and strengthen vendor cybersecurity after a debt-collector breach affected 82,958 Alaska residents.
- Author: News Desk
- Tags: Tech, Alaska

Alaska has joined a 44-attorney-general settlement requiring Labcorp to pay about $2.29 million and strengthen oversight of outside vendors after a medical-debt collector’s data breach affected 82,958 Alaska residents.

The [Alaska Department of Law](https://law.alaska.gov/press/releases/2026/092526-Labcorp.html?ref=theamericanquorum.com) announced the agreement September 25\. State officials said the 2019 breach at Retrieval-Masters Creditors Bureau, which operated as American Medical Collection Agency, potentially exposed information belonging to more than 27.5 million people nationwide. That total included 10.2 million Labcorp patients and the Alaska residents identified by the state.

Labcorp used AMCA to collect outstanding patient bills and transferred customer information for that work. In a [federal securities filing](https://www.sec.gov/Archives/edgar/data/920148/000092014826000139/lh-20260331.htm?ref=theamericanquorum.com), the company said an unauthorized user had access to AMCA’s system from August 1, 2018, through March 30, 2019\. Potentially affected data included names, addresses, balances, telephone numbers, birth dates, referring physicians and dates of service. Health-insurance information and some Social Security numbers may also have been involved, but Labcorp said ordered tests, laboratory results and diagnostic information were not stored in the affected system.

The breach occurred at the collection agency rather than inside Labcorp’s own systems. Labcorp said it stopped sending new accounts to AMCA and halted the vendor’s work after receiving notice. Alaska’s settlement position is that outsourcing did not remove Labcorp’s responsibility to evaluate and oversee a contractor holding sensitive patient information.

The agreement goes beyond the financial payment. According to the [multistate terms](https://portal.ct.gov/ag/press-releases/2026-press-releases/attorney-general-tong-leads-multistate-settlement-with-labcorp?ref=theamericanquorum.com), Labcorp must expand its vendor-risk program, establish internal reporting for vendor security events and limit data sharing while accounting for debt-collection requirements. It must also treat debt collectors as a specialized vendor category, maintain contract inventories, require security assessments and audits, segment aggregated customer data and preserve termination rights for noncompliance.

A third-party assessor will evaluate Labcorp’s information-security program with a focus on vendor management. The company will pay $2,287,455 to the participating states. Alaska’s public announcement does not specify the state’s individual allocation, and the government settlement should not be read as a direct payment program for every affected resident.

The enforcement action is separate from private litigation. Labcorp’s filing says the company entered a class-action settlement in March 2026, subject to court approval. Connecticut’s attorney general described that proposed class settlement as $35 million and said the state agreement also supplements a 2021 multistate settlement with AMCA that included a $21 million payment suspended because of the collector’s bankruptcy.

For Alaskans, the immediate significance is accountability rather than a newly announced claims process. The agreement establishes specific controls for how a national laboratory supervises companies handling medical debt and related personal data. It also gives state attorneys general an enforceable framework for measuring whether Labcorp improves vendor screening, data minimization, incident reporting and contract enforcement after a breach that reached tens of thousands of Alaska residents.