CClaimWatch
Claims closedNo proof of purchase neededprivacydata breach

Cencora/The Lash Group Data Security Incident Settlement

Up to $5,000

Last verified July 13, 2026Source: claimdepotHow ClaimWatch verifies cases

This settlement is closed to new claims — the deadline was January 19, 2026. You can still see what it was about and follow the case in court below. Looking for money you can still claim? Browse open settlements →

What happened

On February 27, 2024, Cencora disclosed that its information systems had been improperly accessed by unknown parties. The data breach exposed Personal Information including names, addresses, Social Security numbers, health and insurance information, financial account information, and other sensitive data. Cencora has agreed to pay $40,000,000 and implement enhanced data and information security measures to resolve claims arising from this incident.

Do you qualify?

All individuals and persons who reside in the United States and its territories whose Personal Information was involved in the incident and received mailed notice or substitute notice through the website/media press release, or who were on "Inquiry Notice" because they experienced potential fraud indicators (such as unexpected explanation of benefits or bank fraud alerts) between September 1, 2023 and August 5, 2025.

How to file

Submit a Claim Form online at the Settlement Website or by mail to the Settlement Administrator by January 19, 2026. For a Documented Loss Payment of up to $5,000, include supporting documentation of losses or unreimbursed expenses incurred after September 1, 2023. Alternatively, you may submit a Claim Form for a cash payment with no documentation required.

Common questions

How much does the Cencora/The Lash Group Data Security Incident Settlement pay?
Estimated payout: Up to $5,000. The total settlement fund is $40M. Actual amounts depend on how many valid claims are filed — most settlements divide a fixed fund pro rata, so a higher claim rate means a smaller individual check. An "up to" figure is a cap, not a guarantee.
What is the claim deadline for the Cencora/The Lash Group Data Security Incident Settlement?
This settlement is closed to new claims — the deadline was January 19, 2026. Once a claim deadline passes you generally forfeit your share, even if you qualified.
Do I need proof of purchase for the Cencora/The Lash Group Data Security Incident Settlement?
No. You can file without a receipt or proof of purchase. You attest that you qualify and submit basic details, though claims are still subject to review and submitting a false claim is a crime.
Is the Cencora/The Lash Group Data Security Incident Settlement notice real, or a scam?
Kroll Settlement Administration LLC is the settlement administrator for this case. Claims are filed at cencoraincidentsettlement.com. Filing a class action claim is always free — no legitimate settlement charges you to claim, and no administrator will ask for payment, a gift card, or your full Social Security number by email or text. If a notice asks for any of those, it is not from the administrator. When in doubt, ignore the link you were sent and go to the official settlement website directly.
When will payments from the Cencora/The Lash Group Data Security Incident Settlement be sent?
Class action payouts typically take 12 to 24 months after the claim deadline, and longer if the settlement is appealed. The final approval hearing for this case is set for February 5, 2026; no payments can be issued before a settlement receives final approval.

Who's involved

Plaintiffs

  • BRIDGET REARDON
  • ELIZABETH FAGOT
  • MICHAEL COGGINS
  • MARGIE LOPEZ
  • LISA BLEDSOE
  • SANDRA WEYERMAN
  • DEANA SPAULDING
  • CHERIE KLEPEK

+ 46 more

Defendants

  • DOES
  • GLAXOSMITHKLINE PATIENT ACCESS PROGRAMS FOUNDATION
  • GLAXOSMITHKLINE, LLC
  • REGENERON PHARMACEUTICALS, INC.
  • BRISTOL MYERS SQUIBB PATIENT ASSISTANCE FOUNDATION, INC.
  • BRISTOL MYERS SQUIBB COMPANY
  • SUMITOMO PHARMA AMERICA, INC.
  • THE LASH GROUP, LLC

+ 1 more

Counsel for plaintiffs

Parties and counsel from the public court docket. Listing an attorney here isn't an endorsement, and ClaimWatch isn't affiliated with any of them.

New to class actions?

This summary was generated from public settlement documents and may contain errors. Confirm eligibility, deadlines, and payment terms on the official settlement website before filing. ClaimWatch is not a law firm and this is not legal advice. Filing a claim is free.

More privacy settlements

View all →
October 15, 2026No proof neededprivacy

Period Tracker Data Privacy Settlement (Flo, Google, Flurry)

Between November 2016 and February 2019, the Flo period and ovulation tracker app allegedly incorporated code from third-party software development kits (from Flurry, Meta, and Google) through which user information related to menstruation and pregnancy was allegedly shared without proper legal authorization. Google agreed to pay $48 million, Flo agreed to pay $8 million, and Flurry agreed to pay $3.5 million to settle. All defendants deny wrongdoing and assert they did nothing wrong.

…more

Not stated

October 22, 2026privacy

Lands' End Data Breach Settlement

Lands' End experienced a data security incident in December 2024 that compromised certain files containing personal information of class members, including names, dates of birth, Social Security numbers, driver's license and passport information, and in some cases medical information. Lands' End denies wrongdoing, but has agreed to settle the lawsuit to avoid costs and risks of continued litigation.

…more
November 9, 2026privacy

Forbes Media Website Tracker Class Action Settlement

Forbes Media collected IP addresses and unique identifiers without consent using trackers on its websites between December 20, 2023 and June 11, 2026, and shared this data with third parties, allegedly in violation of California's Invasion of Privacy Act and Unfair Competition Law. Forbes denies these allegations and any wrongdoing.

…more

Pro rata payments from the Settlement Fund after deductions for administration costs, court-awarded attorneys' fees and costs, and incentive awards

November 12, 2026data breach

American Vision Partners Data Breach Settlement

American Vision Partners suffered a cyberattack discovered in November 2023 that compromised personal information of approximately 1.6 million U.S. residents, including Social Security numbers for about 258,070 people. Plaintiffs allege personal information was compromised; the defendant denies this allegation.

…more

Pro-rata cash payments or out-of-pocket expense claims for Damages Settlement Class Members