Cencora

Cencora, Inc. notified Delaware AG on May 28, 2024, of a data security incident discovered on February 21, 2024. Unauthorized actors exfiltrated data from Cencora's information systems, affecting personal information (name, address, DOB), health diagnoses/medications, and financial account numbers. Cencora engaged law enforcement and cybersecurity experts, contained the breach, and offered 24 months of credit monitoring via Experian. No evidence of fraud was found at the time of notification.