A $40,000,000 class action settlement has been reached with Cencora, Inc. and The Lash Group, LLC over a 2024 data breach that exposed sensitive personal information.
Claim deadline: January 19, 2026.
No proof needed for basic cash payments.
Why This Lawsuit Exists
In February 2024, Cencora (formerly AmerisourceBergen) announced a data breach affecting over 1.4 million people across the U.S. The lawsuit claims that unauthorized parties accessed Cencora’s systems, compromising personal data like Social Security numbers, health and insurance information, and financial details.
Cencora denies wrongdoing but agreed to the $40M settlement to resolve the claims and cover related expenses — plus they’ve boosted their data security to prevent future breaches.
Who Qualifies
You’re included if you:
Live in the U.S. or its territories, and
Your personal information was part of the Cencora or Lash Group data breach, and
You either received a notice of the incident or were affected between September 1, 2023, and August 5, 2025.
Even if you didn’t get a notice, you may still qualify if you suspect your info was impacted (for example, if you received a fraud alert, unexpected medical bill, or strange account activity).
How Much Can You Get
Two payment options are available:
Documented Loss Payment:
Up to $5,000 per person for out-of-pocket losses related to the breach (proof required — like receipts, statements, or screenshots).
Total capped at $5 million.Cash Fund Payment:
A cash payout with no documentation required, amount depends on how many people file.
California residents receive double the payout compared to others.
Your Options (At a Glance)
| Option | What It Means | Deadline |
|---|---|---|
| Submit a Claim | Get money for losses or a cash payment | Jan. 19, 2026 |
| Exclude Yourself | Keep your right to sue Cencora on your own | Dec. 18, 2025 |
| Object | Tell the Court if you disagree with the settlement | Dec. 18, 2025 |
| Attend the Hearing | Watch or speak at the approval hearing | Feb. 5, 2026 |
| Do Nothing | Get no money and give up your rights | — |
How to File
Go to CencoraIncidentSettlement.com.
Choose your payment type — Documented Loss or Cash Fund.
Fill out and submit the online claim form (or print and mail it).
If you didn’t get a Class Member ID, you can request one on the claim form page.
Make sure your claim is submitted or postmarked by January 19, 2026.
Mailing address:
Cencora Data Security Incident Settlement
c/o Kroll Settlement Administration LLC
P.O. Box 225391
New York, NY 10150-5391
Need help? Call 833-621-8029.
If your personal data may have been compromised in the Cencora or Lash Group data breach, you could receive cash compensation — even with no proof required.
→ Submit Your Claim Here by January 19, 2026, to claim your share of the $40M settlement.
