Laboratory Services Cooperative Data Breach

WHAT’S THE ISSUE?

Hagens Berman’s data protection attorneys filed a class-action lawsuit against Laboratory Services Cooperative following its failure to properly secure and safeguard the protected health information and identifying information of approximately 1.6 million individuals. Laboratory Services Cooperative was responsible for collecting and maintaining the sensitive info of its patients which include those who visited curtained Planned Parenthood centers, and the breached information includes highly private data such as lab testing data, insurance information, banking and payment details and other government identifiers.

HOW DO I KNOW IF I’M AFFECTED?

The lawsuit’s proposed class includes all U.S. citizens whose private information was compromised as a result of the data breach disclosed by Laboratory Systems Cooperative on or around April 10, 2025. If you have received a data breach notification letter, you may be impacted. Fill out the form to find out your rights. The data breach reportedly involves approximately 1.6 million individuals, including those who received lab testing services from select Planned Parenthood centers using Laboratory Systems Cooperative.

WHAT INFORMATION WAS STOLEN?

According to the data breach lawsuit, information compromised by the breach may include:

• names
• addresses
• phone numbers
• emails
• date(s) of service
• diagnoses
• treatment
• medical record number
• lab results
• patient/accession number
• provider name
• treatment location
• related-care details
• health insurance plan name
• health insurance plan type
• health insurance member/group ID numbers
• billing details
• bank account details
• billing codes
• payment card details
• balance details
• social security numbers
• driver’s license or state ID numbers
• passport numbers
• dates of birth
• demographic data
• student ID number
• other forms of government identifiers

LABORATORY SERVICES COOPERATIVE BREACH EXPLAINED

On or about Oct. 27, 2024, Laboratory Services Cooperative identified suspicious activity within its network and became aware that it was subject to a cyber-security attack. The defendant later confirmed that an unauthorized actor had breached its computer systems and compromised its network.

Despite learning of this breach and conducting its own investigation into the event in February 2025, Laboratory Services Cooperative did not notify those affected or begin to file notices with state attorneys general offices until April 10, 2025, more than five months after it identified the breach.

Adding insult to injury, the delayed online notice failed to include vital information such as how unauthorized access was gained, when it occurred, how it was discovered, as well as which patient centers were affected. Attorneys call Laboratory Services Cooperative’s notice “wholly inadequate” in the data breach lawsuit.

DETAILS FOR THOSE AFFECTED

According to the lawsuit, the data breach occurred because Laboratory Services Cooperative failed to implement adequate and reasonable cyber-security procedures and protocols to protect the private information of those affected. Because Laboratory Services Cooperative’s data security protocols and practices were deficient, unauthorized person(s) accessed a host of patients’ sensitive information.

Hagens Berman’s attorneys suggest that anyone who believes they may have been affected monitor their financial accounts for any suspicious activity. Additionally, experts recommend that affected individuals change their account logins if applicable and freeze their credit with all three credit reporting agencies.

DATA BREACH IMPACTS

Those whose data was stolen in the Laboratory Systems Cooperative data breach must now take steps to protect themselves and mitigate the damages. According to reports, identity theft is the most common consequence of a data breach and happens to about 65% of data breach victims. American adults lost $47 billion to identity fraud and scams in 2024, an increase of $4 billion over 2023, and over 75% of identity theft victims reported emotional distress.

Data breaches and their impacts are widely discussed, and therefore, attorneys believe Laboratory Services Cooperative was given ample awareness of the potential risks and vulnerabilities of its approach to patients’ data protection. “As a laboratory services provider to select Planned Parenthood centers, LSC should have been aware that the data stored on its systems was a likely target for cybercriminals,” the lawsuit states.

HOW CAN A DATA BREACH CLASS ACTION HELP?

The class-action lawsuit against Laboratory Systems Cooperative seeks all monetary and non-monetary relief allowed by law to recover damages as well as compensatory damages for invasion of privacy, and the costs of future monitoring of credit history.

The lawsuit brings claims of negligence, breach of third-party beneficiary contract, invasion of privacy and violations of Washington state’s Data Breach Notification Law and its Consumer Protection Act.

The lawsuit also seeks injunctive relief to prevent future repeated occurrences, which may include requiring Laboratory Systems Cooperative to:

• Protect all data through encryption in accordance with applicable regulations and industry standards
• Delete, destroy and purge personal identifying information of those affected by the breach
• Provide out-of-pocket expenses associated with the prevention, detection and recovery from identity theft, tax fraud and/or unauthorized use of breached data
• Engage independent third-party security auditors/penetration testers as well as internal security personnel to conduct testing, including simulated attacks, penetration tests and audits

YOUR RIGHTS TO YOUR PATIENT DATA

Hagens Berman believes that those affected deserve swift and just action for the alleged negligence of Laboratory Systems Cooperative and other organizations involved in the 2024 data breach. The firm will investigate Laboratory Systems Cooperative and other organizations for negligence and violations of state and federal laws and will seek to secure financial relief for the many impacted by the breach.

TOP DATA BREACH LAW FIRM

Hagens Berman is one of the most successful consumer protection law firms in the U.S. and specializes in data breach litigation. The firm has achieved settlements valued at more than $320 billion against some of the nation's most powerful corporations and institutions. Hagens Berman is a key member of the Leadership Team in In re MOVEit Customer Data Security Breach Litigation, the largest data breach lawsuit in the history of multidistrict litigation, representing consumers against Progress Software and users of Progress’s file transfer software. Hagens Berman is currently one of a select few firms chosen to finalize a settlement with T-Mobile for its 2021 data breach, in which the mobile carrier has agreed to pay $350 million into a settlement fund for customers.

NO COST TO YOU

In no case will any class member ever be asked to pay any out-of-pocket sum. In the event Hagens Berman or any other firm obtains a settlement that provides benefits to class members, the court will decide a reasonable fee to be awarded to the class's legal team.