If you received a notice from Cencora or The Lash Group, your medical data has been exposed. A class action settlement is pending. Here is how to claim your share of the compensation.
The Breach: Is Your Identity Compromised?
In a significant cybersecurity incident, Cencora (formerly AmerisourceBergen), and its subsidiary The Lash Group, suffered a data breach that exposed highly sensitive Personal Health Information (PHI). This data includes not just names and addresses, but also prescriptions, diagnoses, and insurance details. This specific mix of data makes victims highly vulnerable to medical identity theft.
β οΈ Critical Notification Check
Most affected individuals received a physical letter via US Mail titled “Notice of Data Breach.” If you threw this away, you may have discarded your Ticket Number for the settlement. You must verify your status immediately.
According to filings in the Eastern District of Pennsylvania, the plaintiffs allege that Cencora failed to implement adequate security measures. For an independent overview of the case status, you can reference the ClassAction.org Data Breach List.
Timeline of Events & Deadlines
Breach Identified
Cencora detects unauthorized activity within their IT systems. An internal investigation confirms the exfiltration of patient support program data.
Letters Mailed
Victims receive formal notices offering 24 months of Experian IdentityWorks credit monitoring. Activating this service does NOT disqualify you from the cash settlement.
Settlement Claims Open
The court is establishing the claims process. You must submit your claim form before the “Bar Date” (deadline) to receive payment. Late submissions are automatically rejected.
Compensation Tiers: Which One Fits You?
Settlements are structured in tiers to prevent fraudulent claims while rewarding those with actual damages. Tier 2 requires documentation, so start gathering your bank statements now.
- Eligibility: Automatic for anyone who received a Notice Letter.
- Proof Required: None (Just the Claim ID).
- Benefit: 2 Years of Credit Monitoring + Cash payment (estimated $50 – $100 depending on pool size).
- Best For: Those who haven’t seen suspicious activity yet.
- Eligibility: Victims of actual fraud.
- Proof Required: Bank statements, IRS notices, or professional fees paid to fix ID theft.
- Benefit: Reimbursement up to $5,000+ for documented losses.
- Best For: Anyone who lost money or time due to the breach.
Eligibility Verification Tool
Before you file, ensure you meet the criteria. If you check all boxes below, you are a prime candidate for the Tier 1 claim at minimum.
Strategic Warning: Don’t Fall for Scams
When large settlements like this occur, phishing sites appear overnight. They look like the Verified claim site but steal your SSN. Follow these safety rules:
1. Never pay to file: A legitimate Class Action Administrator will NEVER ask for an upfront fee.
2. Verify the URL: Verified settlement sites usually end in `.com` but have very specific names (e.g., `CencoraSettlement.com`). Always cross-reference with the FTC’s Data Breach Guidance page.
If you suspect your identity has already been used (e.g., strange medical bills), file a report immediately at IdentityTheft.gov to create an Verified paper trail. This report is your “Golden Ticket” for a Tier 2 claim.
Save This Guide
Frequently Asked Questions
Yes. Once the Settlement Administrator website is live, there will be a “Lookup” tool. You can enter your Name, Zip Code, and Year of Birth to find your unique Class Member ID.
Compensation for “actual damages” (Tier 2 reimbursement) is generally not taxable. However, flat payments (Tier 1) might be considered income depending on your local laws. Consult a tax professional.
Class action payouts are slow. After the claim deadline passes, the court holds a “Final Approval Hearing.” Payments are usually mailed 90-120 days after Final Approval, assuming no appeals are filed.
The breach itself might hurt your score if scammers use your data. However, joining the lawsuit and filing a claim does NOT negatively affect your credit score. In fact, using the credit monitoring benefit helps protect it.