There is a settlement in litigation stemming from a breach reported last year that affected more than three dozen Cencora/Lash Group clients, and more than 1.4 million patients at last public count. The HIPAA Journal now reports:
Cencora & The Lash Group have agreed to pay $40 million to settle class action data breach litigation over a February 2024 data breach that affected more than 1.43 million individuals.
Cencora, Inc., formerly AmerisourceBergen, is an American drug wholesale company and a contract research organization, and The Lash Group is a pharmaceutical solutions organization. Cencora disclosed the data breach in a February 21, 2024, filing with the U.S. Securities and Exchange Commission (SEC), stating that on February 21, 2024, the company learned that data had been exfiltrated from its information systems.
Read more about the settlement and previous updates on the data breach at HIPAA Journal.
The official settlement website is https://cencoraincidentsettlement.com/, but it does not appear to be online yet.
Read more about the settlement at ClaimDepot.
