The Lash Group Data Breach – Class Action Investigation
Chimicles Schwartz Kriner & Donaldson-Smith is investigating a potential class action relating to a data breach incident involving Cencora, Inc.’s division The Lash Group, a company that manages patient support programs for a number of pharmaceutical companies. The company confirmed that a large number of patients had their information taken in a data breach incident in a notification letter sent out to affected patients beginning on April 10, 2024.
What Happened at The Lash Group?
On February 21, 2024, The Lash Group determined that they had discovered unusual activity on their system. An internal investigation confirmed that an unauthorized party had gained access to the Company’s system resulting in the exposure of sensitive personal and medical information belonging to an unspecified number of patients. Information compromised as a result of the breach includes, but not limited to, the following: name, date of birth, health diagnosis information, and medication and prescription data.
Pharmaceutical companies impacted by this breach include, but not limited to:
- Acadia Pharmaceuticals, Inc.
- Bristol Myers Squibb
- Sanofi
- Dendreon Corporation
- Endo International
- GlaxoSmithKline
- Incyte
- Novartis
- Pharming Therapeutics
- Regeneron
- Sumitomo Pharma America, Inc.
- Tolmar
- Johnson & Johnson
- Takeda Pharmaceuticals
- Smith & Nephew
- Rayner Surgical
- Otsuka America Pharmaceutical
- Sandoz Inc
- Abbott
Why is it Important to you?
The data breach, if confirmed, could have severe implications for the affected users, leading to potential identity theft, financial fraud, and further cyber-attacks. The hacker group’s bold move to put this data on sale goes on to show the growing menace of cybercrime and the increasing sophistication of these cyber adversaries.
If you believe your personal information may have been compromised as a result of this breach, please contact one of our data breach attorneys by filling-out the form provided below.
(*) Indicates required field: When communicating with us through this site or otherwise in connection with a matter for which we do not already represent you, your communication may not be treated as privileged or confidential, and does not create an attorney-client relationship between you and our Firm.
