Laboratory Services Cooperative agreed to establish a $6.1 million settlement fund to resolve consolidated breach litigation, according to HIPAA Journal in its HIPAA Journal settlement report. The case is In re Laboratory Services Cooperative Data Breach Litigation, No. 2:25-cv-00685-BJR, in the U.S. District Court for the Western District of Washington.
LSC is a Seattle nonprofit clinical laboratory that performed diagnostic testing for Planned Parenthood affiliates. Affected patients are largely Planned Parenthood patients, plus current and former employees, HIPAA Journal reports. The settlement denies liability and has preliminary approval only. Final payment requires later court approval and resolution of any appeals.
Official resources:
- Explore the official data from Openclassactions — Use this primary source to review the underlying data.
- Explore the official data from Amazonaws — Use this primary source to review the underlying data.
Table of Contents
- Who is covered?
- What happened to personal information?
- What can eligible people claim?
- What deadlines control payment?
Who is covered?
The class covers people whose lab testing was ordered by a Planned Parenthood center on or before Oct. 27, 2024, according to Hagens Berman class counsel. It also covers current and former LSC employees whose information was compromised.
Coverage remains subject to the detailed definition in the long-form notice. That history matters because LSC served affiliates in about 31 states plus Washington, D.C., HIPAA Journal reports. Most class members therefore trace eligibility through a Planned Parenthood visit, not through LSC directly. Employment-related eligibility is narrower and tied to compromised employee information.
What happened to personal information?
LSC detected unauthorized network activity on Oct. 27, 2024, investigated with outside experts, and completed its review around February 2025, ConsumerAffairs reports. It reported about 1.6 million people affected to state regulators on April 10, 2025.
That sequence explains why notices arrived months after the intrusion. Exposed data varied by person, according to TEISS in its TEISS breach report. TEISS lists names, contacts, Social Security numbers, driver's license or state ID, passport numbers, and dates of birth. It also lists diagnoses, lab results and record numbers, plus health insurance and bank or payment-card information.
What can eligible people claim?
Eligible claimants can seek three benefits, but each requires a timely claim, according to OpenClassActions in its OpenClassActions summary of the court notice. The $1,000 payment is not guaranteed at that amount.
Pro-rata means the final check depends on the number of valid claims and funds left after other costs. Keep receipts, bank statements, credit-monitoring bills, and letters showing time spent fixing fraud.
- Pro-rata cash payment up to $1,000
- Up to $5,000 with documentation for out-of-pocket losses
- Two years of Medical Shield Complete monitoring
What deadlines control payment?
Judge Barbara J. Rothstein granted preliminary approval on July 27, 2026, but not final approval, according to the court in its preliminary approval order. The order sets a final-approval hearing for Jan. 4, 2027 at 10 a.m. PT by Zoom.
The settlement denies liability. Claims must be filed online or postmarked by Nov. 24, 2026 at www.lscdatasettlement.com, HIPAA Journal reports. Exclusion and objection requests are due Oct. 26, 2026. No payments will issue until after final approval and appeals.