HackingStolen CredentialsData ExfiltratedTargetedIDENTITY_BASICHEALTH_BASICLowContained
TheraCom, L.L.C.
bd_63dfd4977ab58da4 · schema v1 · pii pii-v1
Full breach record for TheraCom, L.L.C. →TheraCom, L.L.C., a specialty pharmacy owned by Cencora, Inc., notified consumers of a data security incident discovered on February 21, 2024. Personal information, including names, addresses, and medical treatment data, was exfiltrated. TheraCom engaged law enforcement and cybersecurity experts, and is offering 24 months of credit monitoring via Experian.
Vermont clock✗ VT AG >45 bday33 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_073498cf96e54a1cHHS OCRfiled 2024-10-08Candidate
- bd_44a81119b0139a0dCalifornia State AGfiled 2024-10-08Candidate
- bd_98adae3fe8cb269fMontana State AGfiled 2024-10-08Candidate
- bd_f966adb4daafa8a6Indiana State AGfiled 2024-10-08Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-10-08-theracom-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 8, 2024
- Raw hash
- 5aac602e412a9f3cc35e73c298a09d3694f67e00c03b56aa5a4e14d9861b5d86
Reporting entity
- Name
- TheraCom, L.L.C.norm: theracom
Victim entity
- Name
- TheraCom, L.L.C.norm: theracom
Incident
- Discovered
- Feb 21, 2024
- Materiality determined
- —
- Notification sent
- Oct 8, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 ChannelT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 33 weeks(230 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.