Cencora cyberattack steals US patients' health information
Cencora had data stolen from its internal information systems in a cyberattack in February 2024. The leaked information included data on US patients linked to 11 pharmaceutical companies, and the company notified victims and disclosed that additional data had been stolen. It later emerged that a $75 million ransom had been paid for the attack and that a $40 million data breach lawsuit settlement had been reached.
Key facts
- Affected organization
- Cencora
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Theft of US patient information linked to 11 pharmaceutical companies; $75 million ransom paid
- Cause / method
- Cyberattack targeting internal information systems
- Location
- United States
If your data was exposed
Exposed dataHealth & medical data
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- Cencora disclosed the theft of data from its internal information systems and the possibility that it included personal information.
- The leak of US patient information linked to 11 pharmaceutical companies and the notification of victims came to light.
- Cencora said additional data had been stolen in the February attack.
- It emerged that a $75 million ransom had been paid in connection with the Cencora attack.
- It emerged that Cencora and Lash Group had settled the data breach lawsuit for $40 million.
12 related reports
- Pharmaceutical giant Cencora says data was stolen in a cyberattack
- Cencora discloses data breach in cybersecurity incident
- Cencora data breach exposes patient data at top pharma firms
- US pharma giant Cencora says Americans’ health information stolen in data breach
- Cencora notifies individuals about data stolen earlier this year
- Cencora data breach exposes US patient info from 11 drug companies
- Data breach at pharma partner Cencora puts sensitive patient information at risk
- Cencora says additional data stolen in February cyberattack
- Hacking group Dark Angels received $75 million in bitcoin, marking the largest known ransomware attack to date
- Cencora pays $75 million in Bitcoin in the largest known case of ransomware attack
- Gang Got $75 Million for Cencora Hack in Largest Known Ransom
- Cencora & The Lash Group Settle Data Breach Litigation for $40 Million
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.