Supply chain β›“ Supply Chain

Acrotech Biopharma Inc. Third-Party Breach (May 2024)

πŸ“… 2024-05-01 🏒 Cencora, Inc.
Primary Source β†—

Incident Details

Cencora & The Lash Group Settle Data Breach Litigation for $40 Million. Cencora, The Lash Group, and their affiliates have agreed to pay $40 million to settle class action data breach litigation over a February 2024 data Cencora, Inc., formerly AmerisourceBergen, fell victim to a cyberattack in February 2024. Data was exfiltrated in the attack and at least 27 of its pharma and biotech clients are known to have been affected. Third-party company: Cencora, Inc..

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Cencora, Inc.
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2024-05-01 Breach occurred
  2. 2025-08-11 Publicly disclosed