Cencora, Inc.
bd_0ce47a2c3846a128 · schema v1 · pii pii-v1
Cencora, Inc. notified Montana residents that on February 21, 2024, it discovered unauthorized access to its information systems resulting in the exfiltration of personal information. The data potentially included names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and is offering 24 months of credit monitoring. No evidence of fraud was found at the time of notification.
J jump to incidentP pin to compareR raw source
Incident timeline
Feb 21, 2024
Discovered
May 20, 2024
Filed
vs. sector median
+4 wks slower
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Vermont State AGbd_0923f35c3436c6312024-05-20Verified
- Indiana State AGbd_4711cf0754c3e6de2024-05-20Verified
- Vermont State AGbd_b5ba8c627114462d2024-05-14 · +6dVerified
- Montana State AGbd_82420089075594392024-05-13 · +7dCandidate
Filing propagation · 5 filings · 3 states
View merged incident ↗Pattern: first filing May 13 (MT), last May 20 (MT) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.