Cencora/The Lash Group Data Security Incident Settlement
Up to $5,000
This settlement is closed to new claims — the deadline was January 19, 2026. You can still see what it was about and follow the case in court below. Looking for money you can still claim? Browse open settlements →
What happened
On February 27, 2024, Cencora disclosed that its information systems had been improperly accessed by unknown parties. The data breach exposed Personal Information including names, addresses, Social Security numbers, health and insurance information, financial account information, and other sensitive data. Cencora has agreed to pay $40,000,000 and implement enhanced data and information security measures to resolve claims arising from this incident.
Do you qualify?
All individuals and persons who reside in the United States and its territories whose Personal Information was involved in the incident and received mailed notice or substitute notice through the website/media press release, or who were on "Inquiry Notice" because they experienced potential fraud indicators (such as unexpected explanation of benefits or bank fraud alerts) between September 1, 2023 and August 5, 2025.
How to file
Submit a Claim Form online at the Settlement Website or by mail to the Settlement Administrator by January 19, 2026. For a Documented Loss Payment of up to $5,000, include supporting documentation of losses or unreimbursed expenses incurred after September 1, 2023. Alternatively, you may submit a Claim Form for a cash payment with no documentation required.
New to class actions?
This summary was generated from public settlement documents and may contain errors. Confirm eligibility, deadlines, and payment terms on the official settlement website before filing. ClaimWatch is not a law firm and this is not legal advice. Filing a claim is free.
More privacy settlements
View all →WISP, Inc. Data Privacy Settlement
WISP, Inc. allegedly disclosed customers' personally identifiable information to third parties through Meta Pixel and other tracking technologies without consent, in violation of privacy laws including the Florida Security of Communications Act and California Invasion of Privacy Act. The defendant denies all claims and admits no wrongdoing but agreed to the settlement to avoid litigation costs and uncertainties.
Up to $18
Chattanooga Heart Institute Data Breach Settlement
Memorial Heart Institute experienced a cybersecurity incident between March 8 and March 16, 2023, that may have resulted in unauthorized access to or acquisition of individuals' private information including names, addresses, phone numbers, Social Security numbers, health insurance information, and clinical records.
Dayton Airport Parking FACTA Settlement
SP Plus Corporation allegedly printed the expiration dates of credit cards and debit cards on electronically printed paper receipts at Dayton International Airport parking facilities. The settlement provides parking vouchers to affected customers.
Up to $23
TRISTAR Data Settlement
TRISTAR Insurance Group, Inc. experienced a data breach in November 2022 in which unauthorized access occurred to personally identifiable information of certain TRISTAR customers. TRISTAR denies all claims and wrongdoing; the settlement is not an admission of liability but rather resolves disputed claims.