Cencora compensates data victims: $40 million for those affected!

Cencora compensates data victims: $40 million for those affected!

S&P 500 company Cencora plans to pay out $40 million to victims of a massive data breach that occurred in February 2024. This incident exposed a large amount of sensitive data from the company's systems, which is now expected to be returned to those affected. According to a statement from Daily Hodl, all U.S. citizens whose personal information was compromised are eligible to participate in this settlement. This affects both people who were notified and those who were identified through an “inquiry notice” between September 1, 2023 and August 5, 2025.

Affected individuals may claim up to $5,000 in reimbursement for verifiable losses, with an overall maximum of $5 million. Alternatively, victims have the option of choosing a cash payout without documentation. The amount of this payment depends on the number of claims filed and the amount of money remaining in the settlement.

Data compromise details

Cencora filed the incident in a Form 8-K with the U.S. Navy. Securities and Exchange Commission (SEC) disclosed. The internal investigation revealed that a wide range of personal and sensitive data was stolen. Stolen information includes:

• Namen, Adressen, Geburtsdaten
• Soziale Sicherheitsnummern
• Gesundheits- und Versicherungsinformationen
• Finanzinformationen (Konten, Gehalt, Zahlungen)
• Transaktionsdaten
• Verbraucherprofilinformationen
• Rassenzugehörigkeit oder ethnische Identität, politische Meinungen, sexuelle Orientierung oder Identität
• Strafregister, IP-Adressen, biometrische Daten, genetische Informationen
• Gewerkschaftszugehörigkeit, Führerschein- und Passinformationen

The deadline for submitting claims is January 19, 2026. Those affected have until December 18, 2025 to opt out or raise objections. A final approval process is scheduled for February 5, 2026 to review and, if necessary, approve the distribution of compensation.