Cencora class action claims data breach exposed sensitive patient info

Cencora data breach class action lawsuit overview: 

• Who: Plaintiff Keith Wolford filed a class action lawsuit against Cencora Inc. and The Lash Group LLC. 
• Why: Wolford claims Cencora failed to protect the information of its patients during a data breach disclosed in May. 
• Where: The class action lawsuit was filed in Pennsylvania federal court. 

Drug wholesale company Cencora failed to properly safeguard and secure the protected health information and personally identifiable information of its patients from “criminal hackers” during a data breach disclosed in May.  

Plaintiff Keith Wolford’s class action lawsuit claims Cencora owed it to its patients to protect their private information from “unauthorized disclosure and exfiltration.” 

“Plaintiff and Class Members relied on Defendants to keep their Private Information confidential and securely maintained and to only make authorized disclosures of this Information, which Defendants ultimately failed to do,” the Cencora class action says. 

Wolford wants to represent a nationwide class of individuals who had their private information accessed or acquired as a result of the Cencora data breach, including those who were sent a data breach notice. 

Patients weren’t notified of Cencora data breach for nearly three months, class action claims

Cencora filed an official notice of a “hacking incident” with the Securities and Exchange Commission on Feb. 27, 2024, according to the Cencora class action. The lawsuit claims the company waited until on or about May 17, 2024, to send out data breach letters to individuals affected by the data breach. 

“Plaintiff and Class Members had no idea for approximately three months that their Private Information had been compromised, and that they were, and continue to be, at significant risk of identity theft and various other forms of personal, social, and financial harm,” the Cencora class action says. 

Wolford claims Cencora is guilty of negligence, negligence per se, breach of implied contract, unjust enrichment and breach of fiduciary duty. 

The plaintiff demands a jury trial and requests declaratory and injunctive relief and an award of actual and statutory damages for himself and all class members. 

Kaiser Permanente also recently suffered a data breach that the nonprofit health plan said may have affected more than 13 million current and former members and patients across the U.S. 

Were you affected by the Cencora data breach? Let us know in the comments.

The plaintiff is represented by Nicholas Sandercock and Mason A. Barney and Tyler J. Bean of Siri & Glimstad LLP. 

The Cencora data breach class action lawsuit is Wolford, et al. v. Cencora Inc., et al., Case No. 2:24-cv-02256, in the U.S. District Court for the Northern District of California.

Read About More Class Action Lawsuits & Class Action Settlements:

• Ticketmaster data breach reportedly affects millions of users
• EPA warns majority of drinking water systems vulnerable to cyberattack
• Dell class action claims data breach affected 49M customers
• Nissan data breach impacts 50K+ employees