🍁Vermont State AG
Clustered 21 filings across 2 jurisdictions · filing window May 15, 2024 → Jul 31, 2024. View entity profile → Other incidents for this victim →
incident inc_e2abec8f049a4cd1 · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Discovery to SEC materiality determination
Materiality determination to SEC 8-K filing
Time between earliest and latest filing
Not recorded for this incident
Leak precedence — no leak-site claim in this cluster.
PII · PHI
FEDERAL VT
SEC 8-K · State AG
Earliest sighting first · deep chronology in Litigation Timeline
21 filings across 2 jurisdictions · May 15, 2024 – Jul 31, 2024 · 2 milestones
Feb 21, 2024
Reported by VERMONT AG, SEC 8-K filings
Feb 21, 2024
Registrant determined the incident material — starts the SEC 4-business-day clock
Lash Group, a partner of Cencora, Inc., notified consumers of a data security incident where data from Cencora's information systems was exfiltrated on February 21, 2024. Affected personal information included names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and offered 24 months of credit monitoring. No evidence of fraud was found at the time of notification.
Cencora, Inc. notified Vermont AG of a data security incident discovered on Feb 21, 2024, involving exfiltrated personal information of individuals in its patient support programs. Affected data included names, addresses, DOBs, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and offered 24 months of credit monitoring via Experian.
Cencora, Inc. filed an 8-K/A amending its February 27, 2024 disclosure of a cybersecurity incident discovered on February 21, 2024, in which data was exfiltrated from its information systems. Subsequent investigation confirmed exfiltrated data included PII and PHI, most of which is maintained by a Company subsidiary providing patient support services. The Company has notified affected parties and regulators, believes the incident is contained, and reports no evidence of public disclosure of the data.
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Cencora, Inc. notified Vermont consumers of a data security incident discovered on February 21, 2024, where data was exfiltrated from its information systems. The incident potentially affected personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and offered 24 months of credit monitoring.
Cencora, Inc. notified Vermont AG that on Feb 21, 2024, data from its systems was exfiltrated, potentially affecting personal info including names, addresses, DOBs, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and offered 24 months of credit monitoring. No evidence of fraud was found at the time of notice.
Cencora, Inc. notified Vermont AG of a data security incident discovered on Feb 21, 2024, where data was exfiltrated from its systems. Affected personal information included names, addresses, DOBs, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, reinforced security protocols, and offered 24 months of credit monitoring via Experian. No evidence of fraud was found.
Cencora, Inc. notified Vermont AG of a data security incident discovered Feb 21, 2024, where data was exfiltrated from its systems. Affected personal information included names, addresses, DOBs, and health diagnoses/medications. Cencora engaged law enforcement and cybersecurity experts, reinforced security protocols, and offered 24 months of credit monitoring via Experian.
Cencora, Inc. notified Vermont AG of a data security incident discovered on Feb 21, 2024, where data was exfiltrated from its systems. Affected personal information included names, addresses, DOBs, and health diagnoses/medications. Cencora engaged law enforcement and cybersecurity experts, and is offering 24 months of credit monitoring via Experian.
Cencora, Inc. notified Vermont consumers of a data security incident discovered on February 21, 2024, where data from its information systems was exfiltrated. The incident potentially affected personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged cybersecurity experts and law enforcement, and is offering 24 months of credit monitoring services.
Cencora, Inc. experienced a data security incident on February 21, 2024, where data from its information systems was exfiltrated. Lash Group, a partner, notified affected consumers on May 21, 2024. The breach potentially impacted personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, provided 24 months of credit monitoring, and reinforced security protocols.
Cencora, Inc. notified Vermont AG of a data security incident discovered Feb 21, 2024, where personal information was exfiltrated. Affected data included names, addresses, DOBs, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, provided 24 months of credit monitoring, and reinforced security protocols.
Cencora, Inc. experienced a data breach on February 21, 2024, where personal information was exfiltrated from its systems. Lash Group, a partner, notified affected individuals on May 24, 2024. Data included names, addresses, DOBs, health diagnoses, and medications. No evidence of fraud was found. Cencora engaged law enforcement and cybersecurity experts, and offered 24 months of credit monitoring.
Cencora, Inc. notified Vermont consumers of a data security incident discovered on Feb 21, 2024, where data was exfiltrated from its systems. Affected personal information included names, addresses, DOBs, health diagnoses, and medications. Cencora engaged forensic experts and law enforcement, and is offering 24 months of credit monitoring via Experian.
Cencora, Inc. notified Vermont consumers of a data security incident discovered on February 21, 2024, where data was exfiltrated from its information systems. The breach potentially exposed personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and offered 24 months of credit monitoring.
Cencora, Inc. notified Vermont consumers of a data security incident discovered on February 21, 2024, where data was exfiltrated from its systems. Affected personal information included names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, reinforced security protocols, and offered 24 months of credit monitoring via Experian IdentityWorks.
Cencora, Inc. (via Lash Group) notified Vermont consumers of a data security incident discovered on Feb 21, 2024, where data was exfiltrated from its information systems. Affected personal information included names, addresses, DOBs, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, provided 5 years of credit monitoring, and reinforced security protocols. No evidence of fraud was found at the time of notice.
Cencora, Inc. notified Vermont AG of a data security incident discovered Feb 21, 2024, where data from its information systems was exfiltrated. Affected personal information included names, addresses, DOBs, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and offered 24 months of credit monitoring.
Cencora, Inc. notified consumers of a data security incident discovered on February 21, 2024, where data from its information systems was exfiltrated. The incident potentially affected personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and offered 24 months of credit monitoring.
Cencora, Inc. experienced a data breach on February 21, 2024, resulting in the exfiltration of personal information including names, addresses, dates of birth, health diagnoses, and medications. Lash Group, a partner, notified affected consumers on May 31, 2024. Cencora engaged law enforcement and cybersecurity experts, and offered 24 months of credit monitoring.
Cencora, Inc. notified consumers of a data breach discovered on February 21, 2024, where unauthorized actors exfiltrated personal information including names, addresses, dates of birth, health diagnoses, and medications. Cencora engaged law enforcement and cybersecurity experts, contained the incident, and provided 24 months of credit monitoring via Experian. No evidence of fraud was found at the time of notification.
Cencora, Inc. experienced a data breach on February 21, 2024, resulting in the exfiltration of personal information including names, addresses, dates of birth, health diagnoses, and medications. The Lash Group, a partner of Cencora, notified affected consumers in Vermont and other jurisdictions on June 7, 2024. No evidence of fraud was found. Cencora engaged forensic experts and law enforcement, and offered 24 months of credit monitoring via Experian.