HackingHealthcareHealthcareCapture Stored DataData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedDelayed DiscoveryPIIPHIIDENTITY_BASICHEALTH_BASICLowContained
Otsuka America Pharmaceutical, Inc.
bd_31045759e390f30e · schema v1 · pii pii-v1
Full breach record for Otsuka America Pharmaceutical, Inc. →On February 21, 2024, Cencora, Inc. learned that data from its information systems had been exfiltrated. The data included personal information held by Cencora's Lash Group affiliate through its partnership with Sumitomo Pharma America, Inc. in connection with patient support programs. Affected data included names, addresses, dates of birth, health diagnoses, and medications/prescriptions. Cencora engaged cybersecurity experts and law enforcement and confirmed the impact on April 10, 2024.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_38c52d67b19e33ccIndiana State AGfiled 2024-05-23Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-585855
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 23, 2024
- Raw hash
- 568770a68b3cb09ea7e5f7ef5c3f4eb5f846f91a5243694d75ed016daab34604
Reporting entity
- Name
- Otsuka America Pharmaceutical, Inc.norm: otsuka america pharmaceutical
Victim entity
- Name
- Otsuka America Pharmaceutical, Inc.norm: otsuka america pharmaceutical
- Industry
- Healthcarellm
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIPHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 ChannelT1119 Automated CollectionT1074 Data Staged
- Threat actor
- External
- Third party
- via Cencora, Inc. / Lash Group
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.