Hawaii has signed on to a multistate deal with Labcorp over a 2019 data breach, a modest win for the thousands of residents whose information was exposed.

• The breach happened at AMCA, the debt collector Labcorp used, and hit millions of people nationwide.
• Labcorp will pay about $2.3 million split among the states in the deal.
• The company also has to run security audits and tighten the rules for the outside vendors it hands data to.
• A separate class action meant to compensate affected residents is still pending.

Outlook: Payouts to individuals depend on the pending lawsuit, not this settlement, so affected residents will be waiting a while longer.