Laboratory Services Cooperative (LSC) has released a statement informing it suffered a data breach where hackers stole sensitive information of roughly 1.6 million people from its systems. LSC is a Seattle-based nonprofit organization that provides centralized laboratory services to its member affiliates, including select Planned Parenthood centers. It plays a crucial role within its niche, supporting organizations in the reproductive health services across more than 35 U.S. states, handling sensitive lab testing, billing, and personal data. The organization published yesterday a notice of a security incident caused by a threat actor that breached its networks in October 2024 and stole data. “On October 27, 2024, LSC identified suspicious activity within its network,” reads the notice. … The information exposed for each individual varies and may include one or more of the following data types:
Personal identifiers: Full name, SSN, driver's license or passport number, date of birth, and government-issued IDs.
Medical info: Dates of service, diagnoses, treatments, lab results, provider, and facility details.
Insurance info: Plan type, insurer, and member/group ID numbers.
Billing and financial data: Claims, billing details, bank and payment card info.
According to a filing submitted to the Maine’s AG Office, the data breach impacts 1,600,000 people. …