The Lash Group, LLC
ent_11f4553f1fd1e2e6cf110000
Disclosures
25+
State AG · HHS OCR · 6 jurisdictions
Multi-filing incidents
5
incidents joining 2+ filings here
Max affected reported
15,196
nationwide · HHS OCR PA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- The Lash Group, LLC
- Normalized
- the lash— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (newest 25)newest first
- New Hampshire State AGas victim2024-08-05
The Lash Group, LLC notified the New Hampshire Attorney General of a data security incident affecting 16 state residents. Cencora learned of unauthorized data exfiltration on Feb 21, 2024, and Lash Group confirmed the breach on Apr 10, 2024. Affected data included PII and government IDs. Notifications and credit monitoring were sent on Jul 30, 2024.
- Massachusetts State AGas victim2024-07-31
The Lash Group, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-07-31. 34 Massachusetts residents were affected.
- New Hampshire State AGas victim2024-07-15
The Lash Group, LLC notified the NH Attorney General of a data security incident affecting 38 NH residents. Cencora (Lash Group's partner) detected unauthorized exfiltration of personal information (including SSNs and DOBs) starting Feb 21, 2024. Notifications were mailed July 8, 2024, offering credit monitoring. No evidence of fraud was found.
- Vermont State AGas reporting2024-07-08
Lash Group, a partner of Cencora, Inc., notified consumers of a data security incident where data from Cencora's information systems was exfiltrated on February 21, 2024. Affected personal information included names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and offered 24 months of credit monitoring. No evidence of fraud was found at the time of notification.
- Massachusetts State AGas victim2024-07-08
The Lash Group, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-07-08. 102 Massachusetts residents were affected.
- New Hampshire State AGas victim2024-07-02
The Lash Group, LLC notified the NH Attorney General of a data security incident affecting 3 NH residents. Data was exfiltrated from Lash Group's systems, which held information from a partnership with Clovis Oncology Inc. Lash Group discovered the incident on Feb 21, 2024, and notified the AG on June 11, 2024. Affected data included names, SSNs, DOBs, and financial account numbers. Lash Group engaged forensic experts, law enforcement, and offered credit monitoring.
- New Hampshire State AGas victim2024-06-25
The Lash Group, LLC notified the NH Attorney General of a data security incident affecting 26 NH residents. Unauthorized access led to data exfiltration from systems holding PII for Acrotech Biopharma Inc. customers. Cencora (Lash Group's partner) detected the incident on Feb 21, 2024. Notifications sent June 20, 2024, offering credit monitoring.
- PENNSYLVANIAHHS OCRas victim2024-06-21
The Lash Group, LLC reported to HHS on 2024-06-21 a Hacking/IT Incident affecting 15196 individuals. Breached information located on Network Server. Business associate present.
- Massachusetts State AGas victim2024-06-20
The Lash Group, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-06-20. 158 Massachusetts residents were affected.
- Massachusetts State AGas victim2024-06-20
The Lash Group, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-06-20. 8 Massachusetts residents were affected.
- New Hampshire State AGas victim2024-06-11
The Lash Group, LLC notified the NH Attorney General of a data security incident affecting 420 NH residents. Cencora (Lash Group's partner) detected unauthorized exfiltration of PII on Feb 21, 2024. Notifications sent June 7, 2024, offering credit monitoring.
- Massachusetts State AGas victim2024-06-11
The Lash Group, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-06-11. 19 Massachusetts residents were affected.
- New Hampshire State AGas victim2024-06-10
The Lash Group, LLC notified the NH Attorney General of a data security incident affecting 133 NH residents. Cencora detected unauthorized exfiltration on Feb 21, 2024. Lash Group, a Cencora affiliate, confirmed impact on April 10, 2024. PII including SSNs and DOBs were exposed. Credit monitoring offered.
- New Hampshire State AGas victim2024-06-10
The Lash Group, LLC notified the NH Attorney General of a data security incident affecting 24 NH residents. Cencora learned of unauthorized exfiltration on Feb 21, 2024. Data included names, SSNs, DOBs, and driver's licenses. Notifications sent June 5, 2024, with credit monitoring offered.
- New Hampshire State AGas victim2024-06-10
The Lash Group, LLC notified the NH Attorney General of a data security incident affecting 7 NH residents. Cencora detected unauthorized exfiltration on Feb 21, 2024. Data included PII/PHI. Notifications sent June 5, 2024, offering credit monitoring.
- Oregon State AGas victim2024-06-07
The Lash Group, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2024-06-07.
- Washington State AGas reporting2024-06-07
The Lash Group, a third-party service provider for Pfizer Inc., disclosed a cybersecurity incident on February 21, 2024, involving the exfiltration of personal information including names, addresses, dates of birth, health diagnoses, and medications. The incident was reported to the Washington Attorney General on June 7, 2024, affecting 2,650 Washington residents. The Lash Group engaged forensic experts and offered credit monitoring to affected individuals.
- Massachusetts State AGas victim2024-06-07
The Lash Group, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-06-07. 1,646 Massachusetts residents were affected.
- Vermont State AGas reporting2024-06-07
Cencora, Inc. experienced a data breach on February 21, 2024, resulting in the exfiltration of personal information including names, addresses, dates of birth, health diagnoses, and medications. The Lash Group, a partner of Cencora, notified affected consumers in Vermont and other jurisdictions on June 7, 2024. No evidence of fraud was found. Cencora engaged forensic experts and law enforcement, and offered 24 months of credit monitoring via Experian.
- Massachusetts State AGas victim2024-06-06
The Lash Group, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-06-06. 140 Massachusetts residents were affected.
- Massachusetts State AGas victim2024-06-05
The Lash Group, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-06-05. 64 Massachusetts residents were affected.
- New Hampshire State AGas victim2024-06-05
The Lash Group, LLC notified the NH Attorney General of a data security incident affecting 50 NH residents. Data was exfiltrated from systems maintained through a partnership with Otsuka America Pharmaceutical, Inc. Personal information including SSNs and driver's licenses was involved. Lash Group engaged forensic experts, notified law enforcement, and offered credit monitoring.
- New Hampshire State AGas victim2024-06-03
The Lash Group, LLC notified the New Hampshire Attorney General of a data security incident affecting 1,527 NH residents. Data was exfiltrated from systems holding information for Johnson & Johnson Services, Inc. customers. Discovery was Feb 21, 2024; notification sent May 28, 2024. PII including SSNs and financial data was involved. Credit monitoring offered.
- New Hampshire State AGas victim2024-06-03
The Lash Group, LLC notified the NH Attorney General of a data security incident affecting 2,981 NH residents. Cencora detected unauthorized exfiltration on Feb 21, 2024. Lash Group confirmed impact on April 10, 2024. Data included names, SSNs, DOBs, and insurance info. Notifications and credit monitoring offered.
- Massachusetts State AGas victim2024-06-03
The Lash Group, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-06-03. 32 Massachusetts residents were affected.