Cencora confirms patient health info stolen in February attack

Cencora (formerly AmerisourceBergen) confirmed that a February cyberattack resulted in the exfiltration of protected health information (PHI) and personally identifiable information (PII) maintained by a subsidiary that provides patient support services; numerous pharmaceutical partners reported exposed patient names, addresses, birthdates, diagnoses, and prescriptions. The company has provided limited technical detail, has not confirmed whether ransomware or a ransom payment was involved, and the breach affects a wide pool of patients across multiple major pharma firms.