Meridian Valley Laboratories experienced a major data breach. On July 3, 2025, the lab discovered suspicious activity within certain systems on its network. determined that an unauthorized actor gained access to the company’s network between May 30 and July 3, 2025.
Files containing personal and protected health information were both accessed and downloaded during the data breach. Compromised information included name, email address, date of birth, medical history, clinical information, treatment information, provider's name, medical record number and payment card information.
Meridian Valley Lab disclosed the cybersecurity incident to the U.S. Department of Health and Human Services on Aug. 29, 2029. The lab also published a Notice of Data Privacy Event on its website, which was updated with current information on Oct. 14, 2025.
The total number of consumers impacted by the data breach has not been released. The lab began notifying affected individuals by mail on Oct. 14, 2025. The data breach was also disclosed to the Vermont Attorney General's office on Oct. 20, 2025.
In addition to required state and federal disclosures, Meridian Valley Lab is offering impacted individuals free TransUnion Cyberscout single-bureau credit monitoring services. The lab has also set up a dedicated assistance line at 206-209-4187 for individuals with questions about the incident.
If you believe your personal information may have been compromised in this breach:
For more information about the company, visit the Meridian Valley Laboratories website.