HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
GlaxoSmithKline Group of Companies
bd_2e587918d883b471 · schema v1 · pii pii-v1
Full breach record for GlaxoSmithKline Group of Companies →Cencora, Inc. notified individuals in multiple states, including Delaware, that personal information (names, addresses, DOB, SSN, health diagnoses, prescriptions) was exfiltrated from its systems on February 21, 2024. The incident involved data related to the GlaxoSmithKline Group of Companies. Cencora took containment steps, engaged law enforcement and cybersecurity experts, and is offering 24 months of credit monitoring via Experian. No evidence of fraud was found at the time of notification.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_ca960a961eac8c79Vermont State AGfiled 2024-05-24Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2024/05/L01_Individual-Notice_GSK_5-24-2024.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 24, 2024
- Raw hash
- c1445e97c3c63792b49749c2a1b23e21f588d50db450071ccae86b3fa44fa5cf
Reporting entity
- Name
- Cencoranorm: cencora
- Domain
- cencora.com
Victim entity
- Name
- GlaxoSmithKline Group of Companiesnorm: glaxosmithkline group of companies
Incident
- Discovered
- Feb 21, 2024
- Materiality determined
- —
- Notification sent
- May 24, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- assistance of law enforcement
Compliance
- Time to disclose
- 13 weeks(93 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.