Virtual Event Today: Ransomware Resilience & Recovery Summit - Login to Live Event
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

Hackers Steal Personal Information From Pharma Giant Cencora

Pharmaceutical solutions provider Cencora discloses a cyberattack that resulted in personal information being stolen from its systems.

Global pharmaceutical solutions provider Cencora on Tuesday disclosed a cyberattack that resulted in personal information being stolen from its systems.

The data breach was identified on February 21, Cencora said in a filing with the Securities and Exchange Commission (SEC). It’s unclear exactly what type of data has been exfiltrated and who it belongs to, whether it’s employees or customers. 

The company said it has taken steps to contain the incident and an investigation has been launched with the assistance of law enforcement and external cybersecurity experts, but provided no further details. 

Organizations in the healthcare sector, particularly ones that don’t directly provide medical services, are often targeted in ransomware attacks, but no known ransomware group appears to have taken credit for the Cencora breach at the time of writing.

“As of the date of this filing, the incident has not had a material impact on the Company’s operations, and its information systems continue to be operational,” the company said. “The Company has not yet determined whether the incident is reasonably likely to materially impact the Company’s financial condition or results of operations.”

This part of the company’s statement likely comes in response to the SEC’s recently implemented rules, which require public companies to disclose cybersecurity incidents that have a material impact within four days. 

Cencora, until recently known as AmerisourceBergen, is a healthcare provider whose solutions are used by manufacturers, providers and pharmacies to improve product access and supply chain efficiency. 

The company has more than 46,000 employees and is ranked #11 on the Fortune 500 and #24 on the Global Fortune 500, with over $230 billion in annual revenue. This likely makes it a tempting target for profit-driven cybercriminals.

Advertisement. Scroll to continue reading.

Related: Ransomware Attack Knocks 100 Romanian Hospitals Offline

Related: Ransomware Gang Claims Attack on Capital Health

Related: State-Sponsored Group Blamed for Change Healthcare Breach

Written By

Eduard Kovacs (@EduardKovacs) is a managing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Backup and recovery firm Keepit has hired Kim Larsen as CISO.

Professional services company Slalom has appointed Christopher Burger as its first CISO.

Allied Universal announced that Deanna Steele has joined the company as CIO for North America.

More People On The Move

Expert Insights

Related Content

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...

CISO Strategy

Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop.

Data Breaches

Delta Dental of California says over 6.9 million individuals were impacted by a data breach caused by the MOVEit hack.

Data Breaches

Sony shares information on the impact of two recent unrelated hacker attacks carried out by known ransomware groups. 

Data Breaches

AT&T is notifying millions of wireless customers that their CPNI was compromised in a data breach at a third-party vendor.

Data Breaches

A group of hackers has leaked Atlassian employee records and floorplans, information that was obtained from third-party workplace platform Envoy.