8-K/AOther Events

Cencora, Inc. 8-K/A Report, Cybersecurity Incident (Jul 31, 2024)

Filed July 31, 2024For Securities:COR

Summary

Cencora, Inc. (COR) filed an 8-K/A amendment on July 31, 2024, providing an update on a material cybersecurity incident first disclosed in February 2024. The investigation confirmed that additional data, including Personally Identifiable Information (PII) and Protected Health Information (PHI) from a subsidiary providing patient support services, was exfiltrated beyond initial estimates. The company has completed its review of most exfiltrated data, has issued required notifications to affected parties and regulatory agencies, and continues to review remaining data for further notification needs. Cencora has no evidence that the exfiltrated data has been or will be publicly disclosed. The company states that it believes the incident has been contained and is undertaking ongoing remediation efforts, including reinforcing systems and enhancing cybersecurity surveillance. Importantly, Cencora asserts that the incident has not had a material impact on its operations and does not believe it is reasonably likely to materially impact its financial condition or results of operations. Investors should monitor any further updates regarding notifications and the ongoing remediation process.

Key Highlights

  • 1Cencora disclosed an update on a material cybersecurity incident initially identified in February 2024 via an 8-K/A filing on July 31, 2024.
  • 2Investigation confirmed exfiltration of additional data beyond initial findings, including PII and PHI from a patient support services subsidiary.
  • 3Company has completed review of most exfiltrated data and has issued required notifications to affected parties and regulatory agencies.
  • 4Cencora has no evidence of public disclosure or intent to publicly disclose the exfiltrated data.
  • 5The company believes the incident is contained and is actively engaged in ongoing remediation efforts to strengthen its systems.
  • 6Cencora states the incident has not materially impacted operations and is not reasonably likely to materially impact financial condition or results of operations.

Frequently Asked Questions