The Cencora data breach is a 2024 incident, not a newly disclosed August 2026 attack. Cencora, formerly AmerisourceBergen, said it learned on February 21, 2024, that data had been taken from its systems and disclosed the incident to the SEC on February 27. The information was connected in part to patient-support programs operated through The Lash Group.
Later settlement filings identified 10,574,473 unique records on the notice list, plus approximately 1.1 million additional affected people for whom Cencora lacked complete contact information. A related $40 million settlement received final approval in 2026, but the ordinary claim deadline—January 19, 2026—has passed.
As an Amazon Associate I earn from qualifying purchases.
What happened in the Cencora breach?
Cencora’s SEC Form 8-K says the company discovered on February 21, 2024, that an unauthorized party had exfiltrated data from its information systems. “Exfiltrated” means data was taken from the systems; it does not, by itself, establish that every record was publicly posted or used for identity theft.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Cencora said some of the data might contain personal information, that it had taken containment measures, and that its systems remained operational. The company later investigated which populations and data elements were involved. On May 8, 2024, The Lash Group confirmed that personal information may have been involved for at least some patient-support populations.
#1 Best Overall
- Protect Your Privacy Effectively: you can use this identity protection roller stamp to flip personal information in under 2 seconds and save time and effort, effectively hiding and protecting your personal information, such as phone numbers, social security numbers, bank statements, shipping addresses, tax documents,data, billing addresses and many more
- Ideal Replacement for Shredder: if you are still using a shredder to shred cards or papers that are printed with your personal information, this security stamper roller will be an alternative tool to block out your privacy effectively and easily
- Refillable and Long Term Use: this confidential stamp can cover a total length of up to 100 meter/ 109 yards, approximately 3,200 prints are covered, pattern width is about 0.78 inches; When ink runs out, you can refill the security stamp with ink
- Easy to Use: just continuous roll the address blocker roller stamp to conceal information, and roll on a second layer for maximum protection, works on paper, envelopes, folders, address labels, etc., please note that may not work on smooth surfaces
- How to Refill the Ink: there are 4 pieces of ID stamp refills, each is about 1.5 ml, you just need to unscrew the cap of the ink bottle (not disposable, you can close the cap for next time of use), then insert it into the hole on the side of the stamp, then turn it upside down, about 5 minutes later, the most of the ink will be replenished to the security roller stamp
The incident became widely known because Lash Group and related programs handled information for patients receiving assistance with medication access, reimbursement, enrollment, and other support services. Someone may therefore have interacted with Cencora or Lash Group without recognizing either company’s name.
Cencora breach timeline
| Date | Development |
|---|---|
| February 21, 2024 | Cencora learned that data had been exfiltrated from its systems. |
| February 27, 2024 | Cencora filed an SEC Form 8-K disclosing the cybersecurity incident. |
| May 8, 2024 | The Lash Group confirmed that personal information may have been involved in certain populations. |
| August 2, 2024 | TechCrunch reported that public breach notices indicated at least 1.43 million people had been notified at that point. |
| January 19, 2026 | The ordinary deadline to submit a claim in the related settlement passed. |
| July 23, 2026 | The official settlement website reported that final approval had been granted and that distributions were expected to begin in August, subject to claim processing. |
Who may have been affected?
Potentially affected people may include patients, caregivers, and former participants in pharmaceutical-company patient-support programs administered by Lash Group or affiliated Cencora businesses. These programs can involve:
- Medication-assistance and drug-access applications
- Insurance-benefit verification and reimbursement support
- Patient enrollment and prescription assistance
- Communications among patients, pharmacies, healthcare providers, and pharmaceutical companies
A mailed notice, email, or substitute notice—not simply a relationship with a particular drug manufacturer—is the best indication that Cencora identified information associated with you. Some people whose addresses were unavailable may not have received an individual letter.
How many people were affected?
The answer depends on what is being counted.
TechCrunch reported at least 1.43 million notified people in August 2024 by analyzing public breach notifications. That was an early reporting figure, not necessarily the final population.
Rank #2
- WHAT DOES IT COVER: Roll once over names, addresses, account numbers, barcodes, and prescription details on mail, statements, shipping labels, and boxes before recycling. The patented 0.5" masking pattern hides 3 lines of text in one pass.
- HOW MANY USES DO YOU GET: Each pre-inked Guard Your ID Advanced Roller delivers about 1,000 impressions (roughly 100 feet of coverage), so the 3-pack gives you around 3,000. A twist-on cap keeps the ink fresh for a 2-year shelf life.
- DOES IT WORK ON GLOSSY LABELS: Yes, on most glossy and coated surfaces, plus paper, envelopes, junk mail, and prescription labels. Give the ink 10 to 15 seconds to dry on slick surfaces; it is instant on paper. Results vary by coating.
- IS IT REFILLABLE: No, and that is the point. The Advanced Roller is pre-inked and sealed, so there are no refill cartridges to buy, no ink bottles to handle, and nothing to dry out on the shelf. When one runs out, reach for the next roller.
- SHREDDER OR ROLLER: No jams, no paper dust, no noise, and the page stays intact and recyclable. Covers boxes and shipping labels a shredder cannot. Faster than a redacting marker, fits in a drawer. Turquoise, Green, White: mail, office, parent.
Later court filings connected with the settlement identified 10,574,473 unique records on the settlement notice list. The filings also described approximately 1.1 million additional affected people for whom Cencora did not have complete contact information.
Those figures should not be added and described without qualification as an exact total of 11.7 million confirmed victims. They reflect different stages and methods of counting: one is an early public-notification tally, another is a later notice-list count, and the additional 1.1 million refers to people lacking complete contact details.
What information may have been exposed?
The information varied by person, program, and record. The settlement materials list categories that may include:
| Category | Examples |
|---|---|
| Identity and contact information | Name, address, date of birth, and other identifying details |
| Government identifiers | Social Security number, driver’s-license information, or passport information |
| Health-related information | Health information, insurance information, or information connected with a patient-support program |
| Financial and transaction information | Financial-account, payment, compensation, or transactional information |
| Electronic identifiers | IP addresses and other electronic or consumer-profile information |
Not every affected person had every type of information involved. For example, the CareDx-related notice lists name, address, date of birth, Social Security number, and the fact that a diagnostic test may have been performed. It says diagnostic-test results were not involved according to Cencora’s investigation.
Rank #3
- GREAT ALTERNATIVE TO A SHREDDER: Paper can be recycled after using the roller stamp, no need for a shredder
- SIZE AND WIDE COVERAGE: Length 2.36 INCH * width 1.26 INCH * height 2.36 INCH; Miseyo 1.5 inches wide Coverage roller stamp is perfect for covering large swaths of private information in a quick and clean way
- PROTECT PRIVACY IDENTITY THEFT: Easily use Miseyo's Roller Stamp to hide your business confidentiality contracts, court documents, barcodes on shipping labels, tax documents, bank statements, social security numbers, credit card statements and offers including your name and address private information, preventing identity theft, reject the harassment of privacy disclosure.NOT recommended to use on glossy surface
- UNLIMITED RE-INK: Miseyo roller stamp comes with an ink hole on the side, do not have to worry about the ink running out when you have to throw away the roller stamps, it can be refilled with ink for repeated use, no need to replace the roller, and permanently hide private identity information
- GOOD TIME SAVER: Are you still shredding private paper the old way? Trouble with pen scribbling 100 times? Burning danger and worry? Use miseyo stamp simple scroll to solve your worries and quickly hide your private and important information
It is therefore too broad to say that everyone’s medical records or test results were stolen. The safer description is that personal information and, for some populations, health-related or protected health information may have been involved.
Was the data publicly leaked or used for fraud?
Cencora’s notices said the company had no evidence at the time that the information had been publicly disclosed or fraudulently used as a result of the incident. That statement does not guarantee that misuse can never occur, and it does not prove that every person who received a notice will experience identity theft.
Watch for unexpected:
- Credit accounts, collection notices, or account changes
- Bank or credit-card transactions
- Medical bills, pharmacy activity, or explanation-of-benefits statements
- Password-reset messages or requests for sensitive information
- Calls claiming that a settlement payment requires a fee
What happened with the Cencora class-action settlement?
Cencora and The Lash Group agreed to a $40 million all-cash settlement. Cencora denied wrongdoing, and the settlement was not an admission of liability. The official settlement FAQ describes two principal benefit routes:
- Documented-loss claims: Eligible class members could seek reimbursement for documented losses, up to $5,000 per person. This category was subject to a $5 million aggregate cap.
- Cash-fund payments: Eligible class members could seek a payment without documenting individual losses. The final amount depended on the number and validity of claims and deductions from the settlement fund.
The $40 million figure was the gross settlement fund—not a guaranteed $40 million divided equally among everyone notified. Attorneys’ fees, administration expenses, service awards, and other court-approved costs could be paid from the fund.
Rank #4
- The id defender roller is the ultimate tool for guarding your personal data at home or in the office. Prevent identity theft by quickly masking sensitive information on mail, documents, or labels, giving you confidence that your details remain private and secure with Vantamo id theft protection.
- Effortlessly block out sensitive text with the label cover up identity protection, designed for quick, one-handed use. No more scraping off all shipping labels or doing a lot of swipes with a marker! Even first-time users will find the process intuitive and straightforward, making it a practical label eraser roller for anyone!
- Vantamo wide rolling privacy marker is fully refillable and arrives with 6 ink refill for self inking stamps ensuring lasting performance. Don't run out when you need it the most. The ink is specially designed for hiding information.
- Our address blackout stamp not only protects your privacy but also helps the environment. After using the roller on your documents, the paper is ready to be safely recycled, making this address eraser a smart alternative to shredding or tossing documents.
- Here at Vantamo, we are creating products that people love! We are committed to providing excellent customer service on every black out stamp. If you ever have questions or concerns, our team is here to help, ensuring your id defender delivers reliable protection and peace of mind every time.
The ordinary claims deadline was January 19, 2026. As of the latest official update available for this article, a new claim should not be treated as timely unless the settlement administrator specifically confirms an exception or late-claim procedure. The settlement website reported final approval on July 23, 2026, with distributions expected to begin in August, subject to processing.
What if you already submitted a claim?
Use the contact information on the official settlement website to check a claim’s status. Keep your claim confirmation, the breach notice, receipts, proof of loss, and correspondence. Do not pay anyone to “release” or “unlock” a settlement payment.
Submitting a claim generally released the right to bring a separate lawsuit concerning the incident under the settlement terms. Excluding yourself preserved the ability to sue but forfeited settlement benefits. Those were historical choices tied to deadlines that have now passed.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallWhat should you do now?
- Verify the notice independently. Do not rely on links in an unexpected email or text. Navigate directly to Cencora’s official notice page or the official settlement domain, and use the phone number printed there.
- Check your credit reports. Use the federally authorized AnnualCreditReport.com rather than a look-alike site.
- Consider a free credit freeze. You can place freezes with Equifax, Experian, and TransUnion. A freeze can help prevent new-credit accounts, but it may temporarily complicate legitimate applications for credit, housing, employment, insurance, or utilities. You must lift it when a legitimate organization needs access.
- Monitor financial and healthcare accounts. Review bank and credit-card statements, pharmacy accounts, patient portals, medical bills, and explanation-of-benefits statements.
- Change reused passwords. Replace any password that may have been used for a patient-support account or elsewhere. Turn on multifactor authentication wherever it is available.
- Use offered monitoring before buying a subscription. Some affected populations, including the population described in the CareDx notice, were offered 24 months of Experian IdentityWorks. Check your specific notice. A paid service may be unnecessary if you already have equivalent coverage through Cencora, a bank, insurer, employer, or credit card.
- Report suspected identity theft. Start at IdentityTheft.gov, and notify the relevant bank, insurer, healthcare provider, or law-enforcement agency.
- Preserve records. Keep the notice, suspicious statements, correspondence, receipts, and any claim documentation in a secure location.
How to avoid Cencora settlement scams
People affected by a large breach are attractive targets for follow-on phishing. Treat any message about a Cencora payment as suspicious if it asks for:
Best Value
- Ultimate Privacy Protection: The MUNGYO Identity Theft Protector offers unparalleled security for your confidential information. Its powerful blackout ink obscures text, making it unreadable and protecting you from identity theft.
- Versatile Application: This redacting pen works on a wide range of surfaces, including paper, cardboard, plastic, and more. Whether you're dealing with documents, mail, or packaging, this marker provides comprehensive coverage.
- Easy to Use: The roll-on design ensures smooth and consistent application, allowing you to quickly and efficiently cover up sensitive data. Its ergonomic design makes it comfortable to hold and easy to maneuver.
- Durable and Reliable: Made with high-quality materials, the MUNGYO Identity Theft Protector is built to last. Its long-lasting ink provides reliable protection, ensuring your information remains secure over time.
- Portable and Convenient: Compact and lightweight, this blackout marker is easy to carry with you wherever you go. Keep it in your bag, desk, or home office for quick access whenever you need to protect your private information.
- An upfront fee, gift card, cryptocurrency, or “processing” payment
- Your password or full online-banking credentials
- A code sent to your phone or email
- More Social Security or payment information than the official administrator requires
- Remote access to your computer or phone
Go directly to cencoraincidentsettlement.com by typing the address yourself. Do not assume a message is legitimate because it uses Cencora’s name or includes personal details. The official settlement administrator should not charge a fee to submit a claim or release a valid payment.
Bottom line
The Cencora incident was a substantial 2024 data-exfiltration event involving information associated with patient-support programs, but the exact data differed among individuals. Later settlement filings identified more than 10.5 million unique records on the notice list, while early public reporting cited at least 1.43 million notifications.
The related $40 million settlement received final approval, but the January 19, 2026 ordinary claims deadline has passed. Whether or not you filed a claim, free credit reports, a possible credit freeze, careful healthcare and financial-account monitoring, strong passwords, and skepticism toward settlement-related messages remain useful protections.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
