DisclosureLens
HackingHealthcareTechnologyHealthcareCapture Stored DataData ExfiltratedTargetedIdentity (basic)Health (basic)PIILowContained

Sanofi US Services Inc.

bd_329f2aecc0d61184 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

May 30, 2024

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

68%
Full breach record for Sanofi US Services Inc. →

Cencora, Inc. (via Lash Group) notified Vermont consumers of a data security incident discovered on Feb 21, 2024, where data was exfiltrated from its information systems. Affected personal information included names, addresses, DOBs, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, provided 5 years of credit monitoring, and reinforced security protocols. No evidence of fraud was found at the time of notice.

Incident timeline — partial

? — ?

Breach window unknown

May 30, 2024

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 5 filings about the same incident.View merged incident
Part of CENCORA, INC. supply-chain incident (2024) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Indiana State AGMay 30 · first
Montana State AGMay 30 · first
Washington State AGMay 30 · first
Vermont State AGMay 30 · first · this page

Pattern: first filing May 30 (IN), last Jun 10 (CA) — a 11-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.