Cencora, Inc. and its subsidiary The Lash Group have agreed to pay $40 million to resolve a class action lawsuit over the February 2026 data breach that exposed patient information to unauthorized third parties.
Who Can Claim?
You may be eligible if:
- You are a U.S. resident whose personal information was compromised in the Cencora/Lash Group data breach
- You received mailed notice, substitute notice (via Cencora’s website or press release), or were placed on inquiry notice due to suspicious activity (fraud alerts, unexpected benefits statements, etc.) between September 1, 2023, and August 5, 2026
What Compensation Is Available?
Eligible class members can choose one of the following benefits:
- Documented Loss Payment
- Up to $5,000 reimbursement for out-of-pocket expenses linked to the data breach
- Requires documentation (e.g., bank statements, receipts, insurance statements, or fraud reports)
- Cash Fund Payment
- A pro rata cash payment from the $40 million settlement fund
- The final amount will depend on the number of valid claims submitted
Note: You cannot claim both reimbursement and the cash payment — you must choose one.
Calculate Your 2026 COLA Increase →How to File a Claim
- Go to the official website – CencoraIncidentSettlement.com
- Log in with your settlement ID (found in your notice) or download the PDF form
- Submit your claim online or mail the form to the administrator
- Provide supporting documents if requesting reimbursement for losses
Claim Deadline: January 19, 2026
Other Key Dates
- Exclusion/Objection Deadline: December 18, 2026
- Final Approval Hearing: February 5, 2026, in the U.S. District Court for the Eastern District of Pennsylvania
Settlement Administrator
Kroll Settlement Administration
www.CencoraIncidentSettlement.com
If your data was compromised in the Lash Group data breach, you could receive money for your losses or a share of the cash settlement fund. Once the deadline passes, you will lose the chance to claim compensation.
