BRISTOL-MYERS SQUIBB COMPANY
bd_9b48ef7232105fe9 · schema v1 · pii pii-v1
Full breach record for BRISTOL-MYERS SQUIBB COMPANY →6 incidents on fileCencora, Inc. and its affiliate Lash Group notified Montana residents of a data security incident involving personal information of patients enrolled in Bristol Myers Squibb patient support programs. Cencora discovered unauthorized exfiltration of data on February 21, 2024. Affected data included names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, and is offering 24 months of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Feb 21, 2024
Discovered
May 17, 2024
Filed
vs. sector median
+3 wks slower
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Washington State AGbd_0adc553539a63fa52024-05-17Candidate
- Vermont State AGbd_269fcc165d95a33a2024-05-17Verified by operator
- California State AGbd_43fa729f230b98f72024-05-17Verified
- Indiana State AGbd_87020ead768c97652024-05-17Verified by operator
Show 1 more filing ↓Show fewer ↑
- Delaware State AGbd_c1f57c93d6a4ce222024-05-17Verified by operator
Filing propagation · 6 filings · 6 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.