$40M Cencora data breach class action settlement

Cencora agreed to a $40 million class action lawsuit settlement to resolve claims it failed to prevent a data breach that compromised sensitive consumer information.

The Cencora class action settlement benefits individuals whose personal information was compromised in a 2024 data breach and who received a mailed notice of the incident or substitute notice through the company’s website or a media press release.

Cencora is a global healthcare solutions company that connects patients, providers and manufacturers. The company was formerly known as AmerisourceBergen Specialty Group.

According to a class action lawsuit, Cencora failed to prevent a data breach in February 2024 that compromised sensitive consumer information, such as Social Security numbers, health and insurance data, financial information and more.

Plaintiffs in the case say they suffered damages as a result of the Cencora data breach, including the risk of identity theft and fraud. The class action lawsuit also claims that Cencora’s negligence caused the breach.

Cencora has not admitted any wrongdoing but agreed to a $40 million class action settlement to resolve the allegations.

Under the terms of the Cencora class action settlement, class members can receive either a documented loss payment or a cash fund payment.

Documented loss payments are available to class members who can provide documentation of losses related to the data breach. These payments are capped at $5,000 per person, with $5 million allocated to these payments. If the number of claims exceeds this $5 million cap, payments may be reduced on a pro rata basis.

Cash fund payments are available to class members who cannot provide documentation of data breach-related losses. The amount of these payments will vary depending on the number of participating class members and the amount of the settlement fund remaining after documented loss payments are paid.

Class members who reside in California may receive twice the amount awarded to non-California class members because of statutory damages under state law.

The deadline for exclusion and objection is Dec. 18, 2025.

The final approval hearing for the Cencora data breach settlement is scheduled for Feb. 5, 2026.

To receive settlement benefits, class members must submit a valid claim form by Jan. 19, 2026.

Who’s Eligible

The settlement benefits individuals and entities whose personal information was involved in the Cencora data breach and who received mailed notice of the incident or substitute notice through Cencora’s website and/or a media press release or who were on “inquiry notice” because of circumstances occurring on or about Feb. 27, 2024, suggesting that they may be aware of harm potentially arising from the unauthorized use of their personal information, such as receipt of an unexpected explanation of benefits statement or a fraud alert from a bank, that would have caused them to determine that the harm may have been caused by the incident.

Potential Award

Up to $5,000 in documented losses or a pro rata cash payment.

Proof of Purchase

Reasonable documentation includes (but are not limited to) credit card statements, bank statements, insurance statements, invoices, telephone records, screenshots and receipts.

Claim Form

NOTE: If you do not qualify for this settlement do NOT file a claim.

Remember: you are submitting your claim under penalty of perjury. You are also harming other eligible Class Members by submitting a fraudulent claim. If you’re unsure if you qualify, please read the FAQ section of the Settlement Administrator’s website to ensure you meet all standards (Top Class Actions is not a Settlement Administrator). If you don’t qualify for this settlement, check out our database of other open class action settlements you may be eligible for.

Claim Form Deadline

01/19/2026

Case Name

Anaya, et al. v. Cencora Inc., et al., Case No. 2:24-cv-02961-CMR, in the United States District Court for the Eastern District of Pennsylvania

Final Hearing

02/05/2026

Settlement Website

CencoraIncidentSettlement.com

Claims Administrator

Cencora Data Security Incident Settlement Administrator
c/o Kroll Settlement Administration LLC
P.O. Box 225391
New York, NY 10150-5391
833-621-8029

Class Counsel

Shauna Itri
SEEGAR WEISS LLP

Erin Green Comite
SCOTT+SCOTT ATTORNEYS AT LAW LLP

Andrew W. Ferich
AHDOOT & WOLFSON P.C.

Jeannine Kenney
HAUSFELD LLP

Roberta D. Liebenberg
FINE KAPLAN AND BLACK RPC

Defense Counsel

Gregory T. Parks
MORGAN, LEWIS & BOCKIUS LLP