The derivative complaint also contained allegations relating to a second data breach in which an unprotected web address granted access to LabCorp documentation containing personal health information. The breach was reported in an article in TechCrunch, which claimed in the breach "at least 10,000 documents were exposed." The derivative complaint alleges that LabCorp "failed to disclose this breach in any widely disseminated public release or SEC filings."