Supply chain
β Supply Chain
Acrotech Biopharma Inc. Third-Party Breach (May 2024)
Primary Source βIncident Details
Cencora & The Lash Group Settle Data Breach Litigation for $40 Million. Cencora, The Lash Group, and their affiliates have agreed to pay $40 million to settle class action data breach litigation over a February 2024 data Cencora, Inc., formerly AmerisourceBergen, fell victim to a cyberattack in February 2024. Data was exfiltrated in the attack and at least 27 of its pharma and biotech clients are known to have been affected. Third-party company: Cencora, Inc..
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Cencora, Inc.
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2024-05-01 Breach occurred
- 2025-08-11 Publicly disclosed