Laboratory Services Cooperative, a Seattle-based nonprofit clinical laboratory serving Planned Parenthood affiliates in 31 US states, agreed to settle class-action litigation arising from a 2024 breach that affected approximately 1.6 million current and former patients and employees. On 27 October 2024 the laboratory identified unauthorised network activity, and forensics found a hacker accessed its network and removed data including names, dates of birth, contact details, medical and claims information, billing and health-insurance data, Social Security numbers and state-issued identifiers. Affected individuals began being notified around 10 April 2025 and the HHS Office for Civil Rights was notified on 20 November 2024, yet the OCR portal still lists the incident as affecting 501 individuals. The settlement is a reminder that healthcare litigation costs accrue independently of — and often well before — regulatory finalisation, and that portal figures lag reality by more than a year in the sector's larger cases.

• Source article