Clustered 40 filings across 4 jurisdictions · filing window May 15, 2024 → Jul 8, 2024. View entity profile → Other incidents for this victim →
incident inc_a76b40d56dd6491d · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Identity (basic) · Government ID · Health (basic)
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
CA DE NH VT
all State AG
Earliest sighting first · deep chronology in Litigation Timeline
40 filings across 4 jurisdictions · May 15, 2024 – Jul 8, 2024 · 2 milestones
Feb 21, 2024
When the intrusion reportedly occurred, per the linked filings
Feb 21, 2024
Reported by CALIFORNIA AG, VERMONT AG, DELAWARE AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Cencora, Inc. notified the California AG of a data breach discovered on February 21, 2024, involving exfiltrated data from its information systems, including personal information of patients served through its Lash Group affiliate. Affected data includes names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged forensic experts and law enforcement, contained the incident, and is offering 24 months of credit monitoring to affected individuals.
Cencora, Inc. notified Vermont AG of a data security incident discovered on Feb 21, 2024. Unauthorized access led to exfiltration of personal information including names, addresses, DOBs, health diagnoses, and medications. No evidence of fraud found. Cencora engaged law enforcement and cybersecurity experts, reinforced security protocols, and offered 24 months of credit monitoring.
Cencora, Inc. notified the California AG of a data breach discovered on February 21, 2024, involving exfiltrated data from its information systems. Affected data potentially includes names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged forensic experts and law enforcement, contained the incident, and is offering 24 months of credit monitoring to affected individuals.
Cencora, Inc. notified California residents that data from its information systems was exfiltrated on February 21, 2024. The incident potentially affected personal information including name, address, date of birth, health diagnosis, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and is offering 24 months of credit monitoring to affected individuals.
Cencora, Inc. experienced a data breach where personal information was exfiltrated from its information systems. The incident, discovered on February 21, 2024, affected names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and offered 24 months of credit monitoring to affected individuals.
Cencora, Inc. (via affiliate Lash Group) notified Vermont consumers of a data security incident discovered on Feb 21, 2024. Data exfiltrated included names, addresses, DOBs, and health diagnoses/medications. No evidence of fraud found. Cencora engaged law enforcement and cybersecurity experts, reinforced security protocols, and offered 24 months of credit monitoring.
Cencora, Inc. notified Delaware residents of a data security incident discovered on February 21, 2024, involving the exfiltration of personal information from its information systems. The data included names, addresses, dates of birth, health diagnoses, and prescriptions. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and offered 24 months of credit monitoring via Experian. No evidence of fraud was found at the time of notification.
Cencora, Inc. notified the California Attorney General of a data breach involving its Lash Group affiliate. On February 21, 2024, Cencora learned that data from its information systems had been exfiltrated. The incident potentially affected personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and offered 24 months of credit monitoring to affected individuals.
Cencora, Inc. experienced a data security incident on February 21, 2024, resulting in the exfiltration of personal information including names, addresses, dates of birth, health diagnoses, and medications. Lash Group, a partner, notified affected individuals on May 21, 2024. No evidence of fraud was found. Cencora engaged law enforcement and cybersecurity experts, and provided 24 months of credit monitoring.
State AG notice filed by Cencora, Inc., Lash Group LLC, and Tolmar, Inc. regarding a data incident. The attachment text is empty, preventing extraction of specific breach details, dates, or affected data types.
Cencora, Inc. notified consumers of a data security incident discovered on February 21, 2024, where data from its information systems was exfiltrated. The incident potentially affected personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged cybersecurity experts and law enforcement, reinforced security protocols, and offered 24 months of credit monitoring via Experian IdentityWorks.
Cencora, Inc. notified California residents of a data breach discovered on February 21, 2024, involving the exfiltration of personal information from its information systems. Affected data may include names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and is offering 24 months of credit monitoring to affected individuals.
Cencora, Inc. notified consumers of a data security incident discovered on February 21, 2024, where data from its information systems was exfiltrated. The incident potentially affected personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged cybersecurity experts and law enforcement, reinforced security protocols, and offered 24 months of credit monitoring via Experian IdentityWorks.
Cencora, Inc. notified California residents of a data breach involving personal health information. On February 21, 2024, Cencora learned that data from its information systems had been exfiltrated. The compromised data potentially included names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, took containment steps, and is offering two years of credit monitoring through Experian.
Cencora, Inc. experienced a data breach in February 2024 where data was exfiltrated from its information systems. The incident affected personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and provided 24 months of credit monitoring to affected individuals. The notice was filed with the Vermont Attorney General on May 23, 2024.
Cencora, Inc. notified California residents of a data breach discovered on February 21, 2024, involving exfiltrated data from its information systems. Affected data potentially includes names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and is offering 24 months of credit monitoring to affected individuals.
Cencora, Inc. notified the California Attorney General of a data breach discovered on February 21, 2024, involving the exfiltration of data from its information systems. Affected data may include names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and is offering 24 months of credit monitoring to affected individuals.
Cencora, Inc. notified the California Attorney General of a data breach involving its Lash Group affiliate. On February 21, 2024, Cencora learned that data from its information systems had been exfiltrated. The incident potentially affected personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and is offering 24 months of credit monitoring to affected individuals.
Cencora, Inc. notified Delaware AG of a data security incident discovered on February 21, 2024, involving exfiltrated data from its information systems. The breach potentially affected personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora took containment steps, engaged law enforcement and cybersecurity experts, and is offering 24 months of credit monitoring via Experian. No evidence of fraud was found at the time of notification.
On February 21, 2024, Cencora, Inc. discovered that data had been exfiltrated from its information systems. Affected data included personal and health information processed by its Lash Group affiliate in connection with patient support programs, including names, addresses, dates of birth, health diagnoses, and medications/prescriptions. Notifications were sent to affected individuals on May 28, 2024, and 24 months of Experian credit monitoring were offered.
Cencora, Inc. notified California residents that data from its information systems was exfiltrated on February 21, 2024. The incident potentially affected personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and is offering 24 months of credit monitoring to affected individuals.
Cencora, Inc. notified Delaware AG of a data security incident occurring on February 21, 2024, involving exfiltrated data from its information systems. The breach affected personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and provided 24 months of credit monitoring via Experian. No evidence of fraud was found at the time of notification.
Cencora, Inc. notified Delaware AG on May 28, 2024, of a data security incident discovered on February 21, 2024. Unauthorized actors exfiltrated data from Cencora's information systems, affecting personal information (name, address, DOB), health diagnoses/medications, and financial account numbers. Cencora engaged law enforcement and cybersecurity experts, contained the breach, and offered 24 months of credit monitoring via Experian. No evidence of fraud was found at the time of notification.
Cencora, Inc. notified Delaware AG of a data security incident discovered on February 21, 2024, involving exfiltrated data from its information systems. The incident affected personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the breach, and provided 24 months of credit monitoring via Experian. No evidence of fraud was found at the time of notification.
Lash Group notified consumers of a data security incident affecting Cencora, Inc. systems. On February 21, 2024, Cencora detected unauthorized exfiltration of personal information including names, addresses, dates of birth, health diagnoses, and medications. No evidence of fraud was found. Cencora engaged law enforcement and cybersecurity experts, and is offering 24 months of credit monitoring via Experian IdentityWorks.
Cencora, Inc. notified California residents that data from its information systems was exfiltrated on February 21, 2024. The incident potentially affected personal information including name, address, date of birth, health diagnosis, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and is offering 24 months of credit monitoring.
Cencora, Inc. notified Delaware AG on May 30, 2024, of a data security incident discovered on February 21, 2024. Unauthorized actors exfiltrated personal information, including names, addresses, dates of birth, health diagnoses, and financial account numbers, affecting individuals in Cencora's patient support programs. Cencora engaged law enforcement and cybersecurity experts, contained the breach, and offered 24 months of credit monitoring via Experian.
Cencora, Inc. notified Vermont consumers of a data security incident discovered on February 21, 2024, where data from its information systems was exfiltrated. The incident potentially affected personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged cybersecurity experts and law enforcement, reinforced security protocols, and offered 24 months of credit monitoring via Experian IdentityWorks.
Cencora, Inc. notified California residents of a data breach discovered on February 21, 2024, involving the exfiltration of personal information from its information systems. Affected data may include names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and is offering 24 months of credit monitoring to affected individuals.
Cencora, Inc. notified California residents that data from its information systems was exfiltrated on February 21, 2024. The incident potentially affected personal information including name, address, date of birth, health diagnosis, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and is offering 24 months of credit monitoring to affected individuals.
Cencora, Inc. notified California residents that data from its information systems was exfiltrated on February 21, 2024. The incident potentially affected personal information including name, address, date of birth, health diagnosis, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and is offering 24 months of credit monitoring.
Cencora, Inc. notified the California Attorney General of a data breach involving its Lash Group affiliate. On February 21, 2024, Cencora learned that data from its information systems had been exfiltrated. The incident potentially affected personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, took containment steps, and is offering 24 months of credit monitoring to affected individuals.
Cencora, Inc. and its Lash Group affiliate discovered on February 21, 2024 that data had been exfiltrated from its information systems. Affected data includes patient names, addresses, dates of birth, health diagnoses, and medications/prescriptions. Cencora engaged law enforcement, cybersecurity experts, and outside counsel, and is offering 24-month Experian IdentityWorks credit monitoring to affected individuals.
On February 21, 2024, Cencora, Inc. learned that data from its information systems had been exfiltrated. The breach involved personal information held by its Lash Group affiliate in connection with patient support programs, including names, addresses, dates of birth, health diagnoses, and medications/prescriptions. Cencora engaged law enforcement, cybersecurity experts, and outside counsel. Affected individuals were offered 24 months of Experian IdentityWorks credit monitoring.
Cencora, Inc. notified consumers of a data breach discovered on February 21, 2024, where data from its information systems was exfiltrated. The incident affected personal information including names, addresses, dates of birth, health diagnoses, and medications/prescriptions. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and offered 24 months of credit monitoring via Experian IdentityWorks. No evidence of fraud was found at the time of notification.
Cencora, Inc. notified consumers of a data breach discovered on February 21, 2024, where unauthorized actors exfiltrated personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and provided 24 months of credit monitoring via Experian IdentityWorks.
Cencora, Inc. notified California residents that data from its information systems was exfiltrated on February 21, 2024. The incident potentially affected personal information including name, address, date of birth, health diagnosis, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and is offering 5 years of credit monitoring to affected individuals.
Cencora, Inc. (via Lash Group) notified California residents that data was exfiltrated from its information systems on February 21, 2024. The incident potentially affected personal information, including names, addresses, and Social Security numbers, of individuals involved in patient support programs. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and is offering 24 months of credit monitoring.
Cencora, Inc. notified Vermont AG that on Feb 21, 2024, data from its systems was exfiltrated, potentially containing personal information. Cencora engaged law enforcement and cybersecurity experts. Affected data includes names, SSNs, and financial account numbers. Cencora offers 24 months of credit monitoring via Experian. No evidence of fraud found.
Cencora, Inc. notified California residents of a data breach discovered on February 21, 2024, where data was exfiltrated from its information systems. Affected data may include names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and is offering 24 months of credit monitoring.