Two unrelated data-breach settlements are both paying cash to affected consumers this fall, and neither requires a receipt to collect the baseline payment. A $35 million settlement tied to a years-old breach at a Labcorp billing vendor closes to new claims on September 3, while a separate settlement over a December 2024 breach at the security company Vector Security accepts claims through September 15. Both let claimants skip the paperwork and take a flat cash payment, though larger amounts are available with documentation.
The Labcorp settlement: an older breach still paying out
The Labcorp case traces back to American Medical Collection Agency, a billing vendor Labcorp had hired to pursue unpaid patient balances. Hackers had access to AMCA’s systems between August 1, 2018, and March 30, 2019, and the intrusion ultimately exposed the protected health information of more than 25 million people across multiple AMCA clients, including 10,251,784 Labcorp patients whose Social Security numbers, payment details and medical test or diagnostic codes were among the data at risk. The consolidated case, In re: American Medical Collection Agency, Inc. Customer Data Security Breach Litigation, Case No. 19-md-2904, sits in the U.S. District Court for the District of New Jersey; Labcorp agreed to the $35 million settlement without admitting wrongdoing. Under the terms posted at the Labcorp settlement FAQ page, class members can request an Alternative Cash Payment of about $50 with no documentation, or file for up to $5,000 in reasonably traceable out-of-pocket losses with receipts attached, plus two years of medical and healthcare monitoring, including up to $1,000,000 in identity-theft insurance, either way. The claim deadline is September 3; the objection and opt-out window already closed July 27, and the court’s Final Fairness Hearing is scheduled for August 20.
Free retirement updates: Miss an enrollment or claim deadline and it may be gone. Our free Retirement Shield newsletter keeps readers ahead of the ones that matter. Get the free newsletter.
The Vector Security settlement: newer breach, broader data exposed
Vector Security, a home and business alarm-monitoring company, discovered unauthorized activity in its systems in December 2024. The breach notice the company filed with state attorneys general, including Maine’s, put the number affected at 30,282 people nationwide, with exposed data that could include names, Social Security numbers, driver’s license or state ID numbers, credit and debit card details, tax identification numbers, and medical and health insurance information; Vector Security notified those individuals directly and offered 12 months of complimentary credit monitoring at the time. The lawsuit that followed, Kocher et al. v. Vector Security, Inc., Case No. GD-26-002764, is pending in the Court of Common Pleas of Allegheny County, Pennsylvania, and produced a settlement with its own separate benefits: an Alternative Cash Payment of about $50 requiring no documentation, capped at a combined $185,000 fund and reduced pro rata if oversubscribed; up to $2,000 for documented losses incurred between December 2024 and September 15, 2026; up to $60 for time spent on the breach, at $20 an hour for up to three hours, counted toward the $2,000 documented-loss cap; and one additional year of CyEx Financial Shield Complete credit monitoring with $1 million in fraud insurance. A judge is scheduled to consider final approval on October 6.
Filing either claim without a Class Member ID
Both settlement sites let someone who never received a mailed or emailed notice look up eligibility directly rather than guess. For the Labcorp claim, a person who received a notice with a Class Member ID can file online at the settlement site using that number, and someone without one can contact the administrator at the phone number listed there to ask about eligibility. Vector Security’s site works the same way, asking for the login ID and PIN printed on its notice, with a phone or email option available for anyone who cannot locate the letter or wants to request a paper claim form. Neither settlement requires enrollment in the other, and a person affected by both breaches can file two separate claims.
Two deadlines, two calendars worth marking
The Labcorp window is the tighter of the two, closing September 3, while Vector Security’s runs an additional twelve days to September 15. Filing after either date forfeits the cash payment on that settlement, whether or not documentation is in hand, since class-action claims periods do not reopen once a court-set deadline passes. For anyone still assembling receipts for the documented-loss track on either claim, bank and credit-card statements, credit-monitoring purchase confirmations, and records of time spent on identity-theft recovery are the records both administrators say they will accept; self-prepared notes can support a claim but cannot substitute for underlying proof on their own.
This article was researched and drafted with the assistance of AI and reviewed by The Financial Wire editorial team.
More Financial Reading
- How many CDs can you park at 1 bank? FDIC rules you must know
- The ideal retirement withdrawal rate so your savings actually last
Warren Cohen is a finance writer based in Phoenix, Arizona, covering personal finance topics including credit, banking, and beginner investing. He earned his degree in business administration from Arizona State University and began his career working in consumer finance, where he gained direct experience with lending and credit systems. He now writes for personal finance websites and fintech platforms, focusing on clear, practical content that helps readers make informed financial decisions.
