A nonprofit clinical laboratory based in Seattle – one that provides diagnostic and analytical testing for Planned Parenthood affiliates in 31 states – has agreed to settle class action litigation over a 2024 data breach. The incident touched roughly 1.6 million current and former patients and employees.
Laboratory Services Cooperative first spotted unauthorized activity on its network on October 27, 2024. Investigators later confirmed that an intruder had gotten into the network and pulled data out. The records that may have been compromised span clinical and financial territory: health insurance information and medical information, along with names, birth dates, contact details, claims and billing information, Social Security numbers, and other government-issued identifiers.
Affected people began receiving notices around April 10, 2025, and the breach was reported to the Office for Civil Rights on November 20, 2024. The federal portal still lists the incident at 501 individuals, far below the real figure, and the letters did not say how long the intruder held access.
The settlement resolves claims brought on behalf of the affected class; the notice did not spell out the full terms of the settlement fund or who qualifies.
Why it matters for healthcare security teams — clinical labs sit at the center of sensitive-care data flows, and one compromised network can expose patients across dozens of states at once. Accurate breach-portal reporting and clear timelines remain a compliance gap. Labs should verify both, since underreporting to OCR invites later scrutiny even after a private settlement closes.
