Labcorp Collection Notice Threatening Your Credit? What a Florida Appeals Court Ruled

Labcorp is in the news for two settlements, and both come from the same event. A hacker had access to the computer systems of Labcorp's debt collector for about eight months. Brian Parker has his own reason to watch. He has a case against Labcorp in Florida, and the appeal in that case produced a ruling that helps anyone who gets a collection notice from a creditor.

This article covers both: what Labcorp is paying for, and what the Florida ruling lets you do.

Key Takeaways

• The breach was at American Medical Collection Agency, Labcorp's debt collector. About 10.2 million Labcorp patients were exposed.
• Labcorp agreed to pay $35 million in a class action and about $2.3 million to 44 attorneys general.
• The FDCPA does not cover most original creditors. Florida's collection statute does, and so do the statutes of many other states.
• In Florida, a creditor that threatens your credit over a debt you dispute must also tell you the dispute will be disclosed. You do not have to prove the dispute was reasonable.

What Labcorp is paying for

The breach did not happen at Labcorp. It happened at American Medical Collection Agency, known as AMCA, which collected small medical debts for Labcorp and other healthcare companies. An intruder had access to AMCA's systems from August 1, 2018 to March 30, 2019. The exposed data included Social Security numbers, payment card information, and the names of medical tests.

Two settlements followed. In a class action in federal court in New Jersey, Labcorp agreed to pay $35 million and denied the allegations. On September 24, 2026, New York's attorney general announced (opens in a new tab) that Labcorp will pay about $2.3 million to a coalition of 44 attorneys general. That agreement also makes Labcorp set security requirements for the debt collectors it uses.

The lesson for you is simple. When a creditor sends your account to a debt collector, your data goes with it.

The paid bill that became a lawsuit

Brian's client had routine lab work done in Florida in January 2022. He paid in person. Then the bills started. The first one carried the heading "Collection Notice" and came from Labcorp itself. It said that failure to pay would result in referral to a collection agency and could affect his credit score.

He did the right thing. He sent a letter. It said the records were wrong and that he had paid in full, in person. It demanded that the payment demands stop, and it cited the Florida statute. It also told Labcorp that the debt was disputed for the purpose of any report to a credit reporting agency.

Labcorp answered with a second notice, marked as a final demand. It gave him 20 days. It said the account would go to an outside collection agency, and that the agency would be authorized to report the balance to the credit bureaus. It told him to protect his credit history. It said nothing about his dispute.

Why the FDCPA did not help, and Florida law did

The FDCPA regulates debt collectors. Labcorp was the company that provided the service, so it was the creditor, and the federal statute did not reach it.

State law can. Florida's collection statute (opens in a new tab) says that no person shall do the listed acts when collecting a consumer debt. "Person" includes the creditor. The same statute is why a bank that collects its own debt in Florida must still follow collection rules.

Two subsections matter here:

• Subsection (3) covers what the creditor says to you. A creditor may not tell a debtor who disputes a debt that it will disclose information that affects the debtor's credit, unless it also tells the debtor that the existence of the dispute will be disclosed.
• Subsection (6) covers what the creditor says to other people. A creditor may not disclose information about a debt it knows to be reasonably disputed, unless it also discloses the dispute.

The purpose is plain. A disputed account is reported as disputed. A creditor that threatens your credit must tell you that your side goes on the record too.

The argument Labcorp made, and how the appeal went

Brian filed the case as a class action. Labcorp moved to dismiss. Its argument was that subsection (3) refers to subsection (6), so the word "reasonably" comes with it. On that reading, the client had to allege that Labcorp knew his dispute was reasonable. The trial court agreed and dismissed the case with prejudice.

Brian appealed. On September 27, 2024, Florida's Fifth District Court of Appeal reversed in Baldwin v. Laboratory Corporation of America (opens in a new tab). All three judges agreed. The court held that the trial court had read subsection (3) incorrectly:

• Subsection (3) protects any debtor who disputes a consumer debt.
• The legislature put "reasonably" in subsection (6). It did not put it in subsection (3).
• The words "as required by subsection (6)" tell the creditor what it must disclose. They do not add a test the consumer must pass.

Brian says Labcorp then asked the court to clarify the opinion, to rehear the case before the full court, and to certify the question to the Florida Supreme Court, and that the court denied all three requests on November 7, 2024. The case is back in the trial court and continues.

If you do not live in Florida

A threat to report a debt is not illegal by itself. If you owe the debt and the report is accurate, a creditor can usually say so. The threat becomes a problem in three situations:

1. The information is false. For example, the creditor threatens to report a bill you already paid.
2. The debt is disputed and the creditor leaves that out. For debt collectors, federal law (opens in a new tab) calls it a false or misleading practice to communicate credit information without saying that a disputed debt is disputed.
3. The creditor cannot legally do what it threatens. California, Colorado, New York, and Minnesota now restrict medical debt on credit reports. A threat to report medical debt where the state forbids it can support a claim.

Many states apply their collection statutes to original creditors. Brian's list includes California's Rosenthal Act, the Texas Debt Collection Act, Maryland, Pennsylvania, Massachusetts, Wisconsin, and North Carolina. Look up your state's collection statute and find out who it covers. If its dispute rule reads like Florida's, you can attach the Baldwin opinion to your counter affidavit as persuasive authority. A Florida ruling does not bind a court in another state, but the reasoning is the same reasoning federal law uses.

What to do with the notice in your hand

Dispute it in writing. Say the records are wrong and say why. Cite your state statute. Say the debt is disputed for credit reporting purposes. Send it with proof of delivery.

Keep every letter. The client's claim exists because he kept the second notice. People who throw the mail away throw their evidence away.

Write down the harm. His letter said the phone calls had done nothing but raise his blood pressure. If the collection effort affects your health, that fact belongs in your records.

Answer if you are sued. A good letter does not replace an answer filed on time.

The dispute letter Brian's client used is in the member library, with the validation and credit report letters.

Got a collection notice for a debt you dispute? ParkerGPT drafts the dispute letter with your state statute cited, and the answer if a lawsuit follows.