TAKEDA PHARMACEUTICALS U.S.A., INC.

Takeda Pharmaceuticals USA, Inc. based in Cambridge, Massachusetts, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-02-23 and reported on 2026-06-26. 392 Texas residents were affected. 2,435 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Medical Information;Date of Birth. Consumers were notified via U.S. Mail.

Takeda Pharmaceuticals USA, Inc. notified the New Hampshire Attorney General of a security incident where an unauthorized third party compromised employee credentials via voice phishing (vishing) around February 9, 2026. The actor exfiltrated files containing personal information (name, SSN, DOB, driver's license) of 5 New Hampshire residents between February 9 and 21, 2026. Takeda discovered the breach on February 23, 2026, contained it, and began notifying affected individuals on May 29, 2026, offering 24 months of credit monitoring.

Takeda Pharmaceuticals USA, Inc. notified Massachusetts residents of a security incident discovered on February 23, 2026, where an unauthorized third party compromised an employee's credentials. The incident involved access to personal information including names. Takeda contained the incident, notified law enforcement, and offered 24 months of Experian IdentityWorks services.

Takeda Pharmaceuticals U.S.A. Inc - The Lash Group reported a data breach to the Montana Attorney General. The breach was reported on 2024-05-31. The breach occurred on 4/10/2024. 91 Montana residents were affected.

Takeda Pharmaceuticals U.S.A., Inc. (The Lash Group, LLC), a health sector entity reported a malware incident to the Washington Attorney General. The organization became aware of the incident on 2024-04-10 and filed notice on 2024-05-31. 889 Washington residents were affected. 51 days elapsed between awareness and notification. 49 days to identify the breach. 0 days to contain the breach.

Cencora, Inc. notified the California Attorney General of a data breach involving its Lash Group affiliate. On February 21, 2024, Cencora learned that data from its information systems had been exfiltrated. The incident potentially affected personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, took containment steps, and is offering 24 months of credit monitoring to affected individuals.