Cencora Pharmaceuticals suffers data theft due to cyber attack
A cyberattack on a major US pharmaceutical company has led to data theft by a currently unknown threat actor.
Hackers accessed the corporate computer systems of Cencora, formerly AmerisourceBergen, a U.S.-based wholesale pharmaceutical company that provides distribution and solutions for pharmacies, doctors’ offices and animal health care facilities.
The company reported the cyberattack in a filing with the U.S. Securities and Exchange Commission, stating that data was stolen from its systems as a result.
“On February 21, 2024, Cencora, Inc. (the ‘company’) learned that data had been extracted from its information systems, some of which may contain personal information,” the February 27 document said.
“Upon initial detection of the unauthorized activity, the company immediately took containment measures and began an investigation with the assistance of law enforcement authorities, cybersecurity experts and external advisors.
“As of the date of this presentation, the incident has not had a material impact on the company’s operations and its information systems remain operational.
“The company has not yet determined whether the incident is reasonably likely to materially affect the company’s financial condition or results of operations.”
According to the VenariX threat feed, the stolen data includes at least first and last names, but nothing indicates what else may have been accessed or extracted. Additionally, the company has yet to determine whether the incident will have an impact on finances or operations.
While no different from ALPHV’s recent attack on the UnitedHealth group’s Change Healthcare that occurred this week, Cencora has said there is nothing to indicate the incidents are related.
“We have no reason to believe there is a connection between the incident at Change and the unauthorized activity at Cencora,” a Cencora spokesperson said. Computer beeping.
In fact, at this stage of the investigation, the threatening actor behind the incident has not been determined and no one has claimed responsibility.
