A lawsuit accuses Labcorp of violating state and federal law as well as its own publicly stated policies by using computer code on its website to take people’s personal medical information and using it to enhance the company’s profit.

The lawsuit was filed last week in U.S. District Court in Pennsylvania by a Pennsylvania man and a Maryland woman who have both used Labcorp’s website over the years to schedule testing and view information about their conditions, but the suit seeks class-action status to represent potentially thousands of people who have used the website.