AMCA data breach settlement

From Settlements, in the HARD wiki · Updated
This article is about the class action settlement over the AMCA data breach. For every settlement, see Settlements.

Yes. The AMCA data breach settlement is real: a $6,438,578.20 class action settlement in federal court, District of New Jersey, run by Kroll Settlement Administration. Claims are open until 4 January 2027, on amcadatabreachsettlement.com only.

Claims are open until January 4, 2027 (online or postmarked); objections and opt-outs are due December 3, 2026 and the final fairness hearing is January 7, 2027.

Is it real?

Yes. The case is In re: American Medical Collection Agency, Inc. Customer Data Security Breach Litigation (All Actions Against Sonic Healthcare U.S.A., Aurora Diagnostics LLC, Clinical Pathology Laboratories, Inc., and Austin Pathology Associates), case number 19-md-2904 (JKS)(MAH), MDL 2904, in the US District Court for the District of New Jersey. The court appointed Kroll Settlement Administration to run it, and its only official site is amcadatabreachsettlement.com.

How the real notice reached people. The court notice refers to a 'Short Form or email notice' that carries a class member identification number, which the claim and objection process asks for. Kroll Settlement Administration is the administrator for both this and the Labcorp AMCA settlement (same PO Box 5324, New York). The notices read here carry no scam warning; the email sender address is not published.

To tell a real message from a scam:

  1. The only official site is amcadatabreachsettlement.com.Type it into your browser yourself rather than tapping a link. Claim pages on news and lawyer-advertising sites, and lookalike addresses, are not the administrator.
  2. Filing costs nothing.No real settlement charges a fee to file a claim or to release a payment. Anyone asking for one is running a scam.
  3. Nobody needs your passwords.The administrator never asks for your AMCA password, your online banking login or a code texted to you. Payment details go only into the claim form on amcadatabreachsettlement.com.
  4. Check by phone.If you aren’t sure a message is real, call the administrator on (833) 453-3715, the number on amcadatabreachsettlement.com, not one in the message.

Who qualifies

People to whom Clinical Pathology Laboratories (CPL), or AMCA on CPL's behalf, sent notice that their information was or may have been involved in the AMCA security incident, and people who got the same kind of notice from Austin Pathology Associates (or AMCA on its behalf). Labcorp and Quest patients are not in this class.

It covers people in the United States only. If you live elsewhere, you are not part of it, whatever a message says.

How much

The total settlement is $6,438,578.20. What each person can claim:

BenefitAmountNotes
Out-of-pocket lossesup to $5,000documented, unreimbursed costs fairly traceable to the AMCA incident (fraud, identity theft, professional fees, credit monitoring bought since August 1, 2018, miscellaneous costs) plus up to 10 hours of documented time at $25 per hour; subject to pro rata increase or decrease
Alternative cash paymentestimated $50instead of out-of-pocket losses; the net fund left after other payments is split evenly among valid claimants, so the amount may change
Medical information monitoringup to 2 yearsCyEx Medical Shield Pro medical and healthcare information monitoring

An amount marked estimated or pro rata changes with the number of valid claims: more claims, smaller shares. Losses need proof, such as receipts or bank statements.

Deadline and payout

  • Claim deadline: .
  • Opt-out and objection deadline: .
  • Final approval hearing: .

Payout. The administrator has not published a payment date; benefits are paid only if the court grants final approval and after any appeals are resolved.

How to file

  1. Go to the settlement website named in your notice (the court notice names www.amcadatabreachsettlement.com).
  2. Enter the class member identification number from your Short Form or email notice.
  3. Choose out-of-pocket losses (with receipts) or the alternative cash payment, and opt in to CyEx Medical Shield Pro if you want it.
  4. Or mail a signed paper claim form, postmarked by January 4, 2027, to Kroll at PO Box 5324, New York, NY 10150-5324; call (833) 453-3715 for a form.

Official site: amcadatabreachsettlement.com. Phone: (833) 453-3715. Mail: American Medical Collection Agency, Inc. Customer Data Security Breach Litigation Sonic Healthcare U.S.A., Aurora Diagnostics LLC, Clinical Pathology Laboratories, Inc., and Austin Pathology Associates Settlement, c/o Kroll Settlement Administration LLC, PO Box 5324, New York, NY 10150-5324.

The breach, and what to do today

An unauthorized user had access to the systems of Retrieval-Masters Creditors Bureau, Inc. d/b/a American Medical Collection Agency (AMCA), a medical debt collector, between about August 1, 2018 and March 30, 2019. AMCA told Labcorp about the incident on May 14, 2019; labs that had sent patient balances to AMCA, including Labcorp, Clinical Pathology Laboratories and Austin Pathology Associates, then notified affected patients.

What was exposed: names; addresses; phone numbers; dates of birth; balance information; referring physician and date of service; health insurance information (some people); Social Security numbers (some people).

A settlement pays for what already happened. The data is still out there, so do these now:

  1. Freeze your credit.In the US it’s free at Equifax, Experian and TransUnion, and no one can open credit in your name while it’s on. Lift it for a day when you apply for credit yourself.
  2. Get an IRS Identity Protection PIN.It stops anyone filing a tax return in your name with your Social Security number. Request one at irs.gov/ippin.
  3. Read your health insurance statements.Check each Explanation of Benefits for care you never had, and tell your insurer if you find any. Medical records can’t be changed like a password.
  4. Put a PIN on your phone account.Ask your mobile provider for a port-out PIN or number lock, so no one can move your number to their SIM.
  5. Distrust messages about AMCA and this settlement.Breach data is used to make scam messages personal enough to believe, for years afterwards. Go to the company or the official site yourself.

To see which other breaches your email address is in, search it on Have I Been Pwned, then read Breaches.

Not published yet

The administrator and the court had not published these when HARD checked on 7 November 2026, so this page doesn’t guess:

  • When payments will be sent.
  • How many people are in the settlement.

Questions

Is the AMCA data breach settlement legit?

Yes. It is In re: American Medical Collection Agency, Inc. Customer Data Security Breach Litigation (All Actions Against Sonic Healthcare U.S.A., Aurora Diagnostics LLC, Clinical Pathology Laboratories, Inc., and Austin Pathology Associates), case 19-md-2904 (JKS)(MAH), MDL 2904, in the US District Court for the District of New Jersey. Kroll Settlement Administration runs it for the court, and the only official site is amcadatabreachsettlement.com.

Who qualifies for the AMCA settlement?

People to whom Clinical Pathology Laboratories (CPL), or AMCA on CPL's behalf, sent notice that their information was or may have been involved in the AMCA security incident, and people who got the same kind of notice from Austin Pathology Associates (or AMCA on its behalf). Labcorp and Quest patients are not in this class.

How much will I get from the AMCA settlement?

Up to up to $5,000 for losses you can prove, or estimated $50 as a cash payment without receipts. The total settlement is $6,438,578.20. Final amounts depend on how many valid claims there are.

What is the deadline for the AMCA settlement?

File by 4 January 2027, on amcadatabreachsettlement.com or by mail.

When will the AMCA settlement pay out?

The administrator has not published a payment date; benefits are paid only if the court grants final approval and after any appeals are resolved.

Other settlements: California Casualty, Finastra, Telmate, Covenant Health, DaVita, Warner Music Group, and the rest in Settlements.

Sources

Checked on 7 November 2026. HARD is not part of the case and doesn’t take claims.

  1. Long form notice: Sonic Healthcare U.S.A., Aurora, CPL and Austin Pathology settlement, US District Court for the District of New Jersey (copy hosted by ClassAction.org), read 7 Nov 2026: fund, class, benefits, dates, Kroll address and phone.
  2. Labcorp Form 10-Q for the quarter ended September 30, 2026: legal proceedings, Labcorp Holdings Inc. (SEC filing), read 7 Nov 2026: AMCA incident dates and data elements; Labcorp settlement final approval August 20, 2026; multistate AG settlement around September 21, 2026.
  3. Labcorp long form notice, US District Court for the District of New Jersey (copy hosted by ClassAction.org), read 7 Nov 2026: Labcorp $35,000,000.00 fund, benefits, deadlines, Kroll as administrator.