GlaxoSmithKline Group of Companies
bd_ca960a961eac8c79 · schema v1 · pii pii-v1
Full breach record for GlaxoSmithKline Group of Companies →GlaxoSmithKline Group of Companies was affected by a data breach involving its third-party service provider, Cencora. Cencora learned on Feb 21, 2024 that data had been exfiltrated. Affected data included names, addresses, DOBs, health diagnoses, and medications. Lash Group, a partner, is notifying consumers and offering 24 months of credit monitoring via Experian. No evidence of fraud was found at the time of notice.
J jump to incidentP pin to compareR raw source
Incident timeline — partial
? — ?
Breach window unknown
May 24, 2024
Filed
No interval is drawn: no breach start or discovery date is on record for this filing.
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Delaware State AGbd_2e587918d883b4712024-05-24Candidate
- Montana State AGbd_32998f8e492da8482024-05-24Verified
- Washington State AGbd_40c0a79b9ea39c922024-05-24Verified
- Indiana State AGbd_430d03658d2604792024-05-24Verified
Filing propagation · 5 filings · 5 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.