Cencora confirms PII/PHI exfiltration in Feb 2024 cyber incident; notifications ongoing

Cencora, Inc.

Exfiltrated data includes personally identifiable and protected health information, most from patient support subsidiary.
Notifications have been sent to affected individuals and regulatory agencies; data review continues.
No evidence data has been or will be publicly disclosed; containment and remediation are ongoing.
Incident has not materially impacted operations or financial condition, per company.

Key facts

Extracted from this filing and checked against the source text.

Cybersecurity Incidents SEC 8-K Item 1.05 confidence 0.9

Cencora, Inc. disclosed a cybersecurity incident: data exfiltration from information systems, including personally identifiable information and protected health information. Impact: no material impact on operations or financial condition. Company determined it not material. Discovered 2024-02-21.

Nature: data exfiltration from information systems, including personally identifiable information and protected health information
Impact: no material impact on operations or financial condition
Materiality: not material
Discovery: 2024-02-21

Exact text from the filing

The incident has not had a material impact on the Company’s operations, and its information systems have continued to be fully operational. The Company does not believe the incident is reasonably likely to materially impact the Company’s financial condition or results of operations.

View on SEC.gov

1 cybersecurity incidents filed in the last 30 days. Browse all cybersecurity incidents →

Cencora, Inc. filing history →

Source: SEC EDGAR

accession 0001104659-24-084351

view filing index on sec.gov

view primary document

Machine-readable: JSON · Markdown · Plain text

This headline and bullets were generated automatically by deepseek-v4-flash:cloud@v2 from the public filing. Read the source on SEC.gov before relying on any specific claim. Not investment advice. See methodology for how this pipeline works.