iscover
Share this article on:
Powered by
MOMENTUM
MEDIA
A cyber attack on a major US pharmaceutical company has resulted in data being stolen by a currently unknown threat actor.
Hackers accessed the corporate IT systems of Cencora, formerly AmerisourceBergen, a US-based drug wholesale company that provides distribution and solutions for pharmacies, doctors’ offices, and animal healthcare facilities.
The company reported the cyber attack in a US Securities and Exchange Commission filing, saying that data was stolen from its systems as a result.
“On February 21, 2024, Cencora, Inc. (the ‘company’), learned that data from its information systems had been exfiltrated, some of which may contain personal information,” said the 27 February filing.
“Upon initial detection of the unauthorised activity, the company immediately took containment steps and commenced an investigation with the assistance of law enforcement, cyber security experts and external counsel.
“As of the date of this filing, the incident has not had a material impact on the company’s operations, and its information systems continue to be operational.
“The company has not yet determined whether the incident is reasonably likely to materially impact the company’s financial condition or results of operations.”
According to the VenariX threat feed, stolen data includes at least first and last names, but nothing indicates what else may have been accessed or exfiltrated. Additionally, the company is yet to determine whether or not the incident will have an impact on finances or operations.
While not dissimilar to the recent ALPHV attack on UnitedHealth group’s Change Healthcare that occurred this week, Cencora has said there is nothing to indicate that the incidents are related.
“We have no reason to believe there is a connection between the incident at Change and the unauthorised activity at Cencora,” a Cencora spokesperson told BleepingComputer.
In fact, at this stage in the investigation, the threat actor behind the incident has not been determined, and none have claimed responsibility.
Be the first to hear the latest developments in the cyber industry.
