Laboratory Services Cooperative is reporting a data breach exposing 1.6 Million people
Learn More
Laboratory Services Cooperative (LSC), a Seattle-based nonprofit organization that provides centralized laboratory services to select Planned Parenthood centers across more than 35 U.S. states, is reporting a data breach affecting approximately 1.6 million individuals.
On October 27, 2024, LSC identified suspicious activity within its network and immediately engaged third-party cybersecurity specialists to investigate the incident. The investigation, which concluded in February 2025, revealed that unauthorized third parties had gained access to portions of LSC's network and exfiltrated certain files containing sensitive information. The exposed data includes:
- Full names,
- Social Security numbers,
- driver's license numbers,
- passport numbers,
- dates of birth,
- government-issued IDs
- Dates of service,
- diagnoses,
- treatments,
- lab results,
- provider details,
- facility information,
- Health insurance plan types,
- Health insurer names,
- Health insurance member/group ID numbers
- Claims information,
- billing details,
- bank account information,
- payment card data
For LSC employees, the leaked information may also include data from dependents or beneficiaries.
The nature of the attack is not disclosed.
LSC has notified federal law enforcement about the incident and has filed breach notifications in multiple states, including Maine and California. The organization has hired cybersecurity firms to monitor the dark web for any appearance of the stolen information, noting that as of April 10, 2025, no such exposure has occurred on dark web markets, forums, or extortion portals.
LSC is offering free credit monitoring and medical identity protection services through CyEx Medical Shield Complete to potentially affected individuals. The duration of these services varies from 12 to 24 months depending on state requirements, with a deadline to enroll by July 14, 2025. For underage individuals with no Social Security number or credit, a separate monitoring and protection service called 'Minor Defense' will be offered.
