You Can Reset a Password. You Can't Reset Your Bloodwork: Labcorp's $2.3M Fine Redefines Who Owns a Breach
Labcorp — one of the largest medical testing companies in America, holding lab results for millions of people — has agreed to pay a $2.3 million fine and rebuild its data security practices from the ground up. The significant part isn't the dollar figure, which is pocket change for a company Labcorp's size. It's that the required fixes are aimed almost entirely at Labcorp's vendors — meaning regulators just made a healthcare giant legally answerable for other companies' security failures.
Bottom Line
A $2.3 million fine won't dent Labcorp's finances, but the settlement's structure sets a precedent that will outlast the check: healthcare companies are now on the hook for their vendors' security, not just their own. Because medical data can never be 'changed like a password,' regulators are treating its protection as a lifetime obligation — and forcing the companies that profit from it to do the same.