Pennsylvania Firm Handing Out $5,000 per Person To Settle Lawsuit Over Data Breach That Exposed Social Security Numbers of at Least 1,400,000 People

A US pharmaceutical giant has agreed to compensate those who were impacted by a major 2024 data breach.

According to the newly updated settlement portal, Cencora (COR) will provide up to $5,000 to those impacted by a cybersecurity attack that reportedly impacted more than one million people.

A class action lawsuit was filed against Cencora after the company disclosed in February 2024 that hackers gained access to its systems and stole personal information.

“In a data breach notification letter dated December 12th, 2024, Cencora announced that World Courier Group and certain of its subsidiaries experienced a data breach that involved the personal information of current and former employees, including name, address, date of birth and Social Security number…

Cencora has not yet publicly confirmed the total number of individuals, pharmaceutical company partners, or other affiliated divisions or companies that were affected by its data breach. Public reports indicate, however, that the Data Breach resulted in the exfiltration of sensitive private information for at least 1.4 million individuals, relating to at least 27 partner pharmaceutical and biotechnology companies as well as other entities related to Cencora.”

Those who suffered losses as a result of the data breach can submit claims and documented losses for “up to $5,000 per person, subject to a cap of $5,000,000 for all documented loss payments.”

Pennsylvania-based Cencora says it generates more than $290 billion in annual revenue and has 51,000 employees.

Generated Image: Midjourney