Major US drug distributor breached, health information stolen

Updated on: May 27, 2024 8:20 AM

Paulina Okunytė
Journalist

Cencora, which partners with Bayer and other major drug companies, has been affected by a data breach, compromising sensitive client health information.

US drug distributor Cencora has notified affected individuals that their personal and highly sensitive medical information was stolen during a cyberattack this year. It remains unclear how many individuals' personal and health details were stolen.

According to the notice, the security incident took place on February 21st, 2024, when the company learned that “data from its information systems had been exfiltrated.”

The breached information includes:

first name
last name
address
date of birth
health diagnosis
medications and prescriptions

Cencora claims that there is “no evidence” that any of the breached data has been or will be publicly disclosed or misused for fraudulent purposes as a result of this incident.

The company has offered affected individuals free credit monitoring and identity theft protection services for 24 months.

The $250-billion company, formerly known as AmerisourceBergen, partners with major pharmaceutical giants such as GlaxoSmithKline, Novartis, Genentech, Bayer, Regeneron, and Bristol Myers Squibb.

The company was sued last year for contributing to the opioid crisis and paid a settlement.