Frequently Asked Questions

A Court authorized the Notice because you have the right to know about the proposed Settlement of this class action lawsuit and about all your rights and options before the Court decides whether to grant final approval of the Settlement. This Settlement Website explains the lawsuit, the Settlement, your legal rights, what benefits are available, who is eligible for them, and how to get them.

The lawsuit is Anaya, et al. v. Cencora, Inc., et al., No. 2:24-cv-02961-CMR, in the United States District Court for the Eastern District of Pennsylvania (the “Action”), before the Honorable Cynthia M. Rufe. The individuals who filed this Action are called the “Plaintiffs” and the entities they sued, Cencora, Inc. and The Lash Group, LLC are called the “Defendants” or “Cencora.” The Plaintiffs and the Defendants agreed to this Settlement after extensive negotiations overseen by a mediator.

Plaintiffs filed this Action individually and on behalf of members of the Settlement Class whose Personal Information was accessed as a result of the Data Incident.

On or about February 27, 2024, Cencora disclosed that data from its information systems had been improperly accessed by unknown parties, some of which could contain Personal Information. Cencora identified individuals whose Personal Information had been compromised or potentially compromised and provided notice to them in 2024. Plaintiffs brought this Action against Defendants.

The Plaintiffs allege that Cencora failed to adequately protect their Personal Information and that they were injured as a result. Cencora denies any wrongdoing, and no court or other entity has made any judgment or other determination of any wrongdoing or that the law has been violated. Cencora denies these and all other legal claims made in the Action. By entering into the Settlement, Cencora is not admitting that it did anything wrong.

In a class action, one or more people called the class representatives sue on behalf of all people who have similar legal claims. Together, all these people are called a class. One court resolves the issues for all Class Members, except for those Class Members who exclude themselves (opt-out) from the class.

The Class Representatives and Cencora do not agree about the legal claims made in this Action. The Action has not gone to trial, and the Court has not decided in favor of the Class Representatives or Cencora. Instead, the Class Representatives and Cencora have agreed to settle the Action. The Class Representatives and their lawyers believe the Settlement is best for all Class Members because of the Settlement Benefits it makes available to Class Members and the considerable risks, delay, expense, and uncertainty associated with continuing the Action.

The Settlement Class includes all individuals and other persons who reside in the United States and its territories whose Personal Information was involved in the Incident, and who received mailed notice of the Incident or substitute notice of the Incident through Cencora’s website and/or a media press release (“Incident Notice”) or who were on “Inquiry Notice” because of circumstances occurring on or after September 1, 2023 through August 5, 2025, suggesting that an individual is aware of harm potentially arising from the unauthorized use of the individual’s Personal Information, such as receipt of an unexpected explanation of benefits statement or a fraud alert from a bank, that upon inquiry, would have caused the individual to determine that the harm may have been caused by the Incident.

If you have any questions as to whether you are a Class Member, you may contact the Settlement Administrator.

Yes. Excluded from the Settlement Class are (1) the Judge(s) presiding over the Action and members of their immediate families and their staff; and (2) Cencora, its subsidiaries, parent companies, successors, predecessors, and any entity in which Cencora or its parents, have a controlling interest, and any current or former members of Cencora’s Executive Leadership Team, Executive Management Committee, or Board of Directors. However, any other current or former employees of Cencora or any of its affiliates to whom Cencora provided Incident Notice and whose Personal Information was involved in the Incident are included in the Settlement Class. As discussed in FAQ 17, persons who properly execute and submit a valid Request for Exclusion prior to the expiration of the Exclusion Deadline of December 18, 2025, shall be excluded from the Settlement Class.

The Settlement provides a $40,000,000 Settlement Fund and enhanced data and information security measures taken by Cencora since the Incident. Any Court-approved attorneys’ Fee Award and Costs, Service Awards to the Class Representatives, reasonable escrow fees, Taxes due on any interest earned by the Settlement Fund, if necessary, and any Administrative Expenses for notice and Settlement administration costs will be paid out of the Settlement Fund, and the balance (“Post DL Net Settlement Fund”) will be used to pay for the Settlement Benefits described below. Any costs associated with Cencora’s enhanced security measures will be paid by Cencora separate from the Settlement Fund. 

If you are a Class Member and you submit a timely and valid Claim Form, you may be eligible to receive one of the following Settlement Benefits:

Documented Loss Payment: You may submit a timely and valid Claim Form for a Documented Loss Payment and provide supporting Reasonable Documentation that you incurred losses or unreimbursed expenses related to the Incident for up to $5,000 per person, subject to a cap of $5,000,000 for all Documented Loss Payments.

Examples of Reasonable Documentation include (but are not limited to): credit card statements, bank statements, insurance statements, invoices, telephone records, screen shots, and receipts. A claim for a Documented Loss Payment cannot be documented solely by a personal certification, declaration, or affidavit from the Claimant; you must provide supporting Reasonable Documentation.

You will not be reimbursed for expenses if you have already been reimbursed for the same expenses by another source, including compensation provided in connection with the credit monitoring and identity theft protection product offered by Cencora after the Incident.

If you file a claim for a Documented Loss Payment and don’t submit Reasonable Documentation, or if your Claim Form is deemed incomplete or invalid by the Settlement Administrator, and you do not cure your Claim Form, the Settlement Administrator will automatically treat and consider your claim as one for a Cash Fund Payment, provided you are a member of the Settlement Class.

In the event that the aggregate amount of all approved Documented Loss Payments exceeds $5,000,000, then the Documented Loss Payment to be paid to each eligible Claimant shall be reduced, on a pro rata basis, such that the aggregate total of all Documented Loss Payments equals $5,000,000.
 

Cash Fund Payment: Instead of submitting a Claim Form for a Documented Loss Payment, you may submit a Claim Form with no documentation to receive a Cash Fund Payment. The amount of each Claimant’s Cash Fund Payment will be determined by the Settlement Administrator and will depend on the number of Class Members that participate in the Settlement and how much of the Settlement Fund remains after payment of Approved Claims for Documented Loss Payments, any Court-approved attorneys’ Fee Award and Costs, Service Awards to the Class Representatives, reasonable escrow fees, Taxes due on any interest earned by the Settlement Fund, and Administrative Expenses for Notice and Settlement administration costs.

As stated in FAQ 12, you cannot submit a Claim Form for both a Cash Fund Payment and a Documented Loss Payment.

In addition, Cencora has taken certain remedial measures and enhanced security measures as a result of the Incident. 

Please review FAQ 9 carefully for additional information regarding the order in which Settlement Benefits are paid from the Settlement Fund. This additional information may impact your decision as to which of the two (2) Settlement Benefit options is the best option for you.
 

Before determining which Settlement Benefit option is best for you, it is important for you to understand how Settlement payments will be made. Class Counsel will request an award of attorneys’ fees up to a maximum of 33 1/3% of the $40,000,000 Settlement Fund ($13,333,333.33), reasonable costs and expenses incurred by Class Counsel up to $300,000, Administrative Expenses for the costs of notice and Settlement administration, any applicable escrow fees and Taxes, and Service Awards of up to $1,500 to each of the twenty-eight (28) Class Representatives to be deducted from the Settlement Fund before making payments to Class Members. The Court may award less than the amounts requested for Service Awards, attorneys’ Fee Award and Costs. The remainder of the Settlement Fund will be distributed in the following order:
 

1.  Approved Claims for Documented Loss Payments up to $5,000 per Class Member will be paid first. If you submit a Claim Form for a Documented Loss Payment and don’t submit qualifying Reasonable Documentation, or if your Claim Form is deemed incomplete or invalid by the Settlement Administrator, and you don’t cure your Claim Form, the Settlement Administrator may automatically treat and consider your claim as a claim for a Cash Fund Payment. In the event that the aggregate amount of all Documented Loss Payments exceeds the total amount of $5,000,000, then the Documented Loss Payment to be paid to each eligible Claimant shall be reduced, on a pro rata basis, such that the aggregate total of all Documented Loss Payments equals $5,000,000.
    
2. The amount of the Settlement Fund remaining after paying Approved Claims for Documented Loss Payments, as well as any Court-approved attorneys’ Fee Award and Costs, Service Awards to the Class Representatives, reasonable escrow fees, Taxes due on any interest earned by the Settlement Fund, and Administrative Expenses for notice and Settlement administration costs, will be used to create a “Post DL Net Settlement Fund,” which will be used to pay all timely and valid Cash Fund Payment claims. The amount of the Cash Fund Payments will be based on a division of the Post DL Net Settlement Fund among Class Members with Approved Claims for a Cash Fund Payment. However, California Class Members who submit Approved Claims for a Cash Fund Payment will receive twice the amount paid to non-California Class Members to account for their statutory damages claims under California law. 

Unless you exclude yourself (opt-out), you are choosing to remain in the Settlement Class. If the Settlement is approved and becomes final, all Court orders and any judgments will apply to you and legally bind you. You will not be able to sue the Released Parties (including Cencora’s affiliates, customers, and business partners) about the Incident. The specific rights you are giving up are called “Released Claims.”

Section 8 of the Settlement Agreement describes the Released Claims and the Release, in necessary legal terminology, so please read that Section carefully. The Settlement Agreement is available on the Documents page of this Settlement Website. Generally speaking, the Released Claims include all claims related to the Incident as more fully described in the Settlement Agreement. For questions regarding the Release or Released Claims and what the language in the Settlement Agreement means, you can also contact Class Counsel listed in FAQ 15 for free, or you can talk to your own lawyer at your own expense.

You must submit a timely and valid Claim Form for the Settlement Benefits described in FAQ 8. Your Claim Form must be submitted online via this Settlement Website by January 19, 2026, or mailed to the Settlement Administrator at the address on the Claim Form, postmarked by January 19, 2026. You cannot submit Claim Forms for both a Cash Fund Payment and a Documented Loss Payment. Claim Forms are also available on the Documents page of this Settlement Website or by calling toll-free (833) 621-8029 or by writing to: 
 

Cencora Data Security Incident Settlement Administrator
c/o Kroll Settlement Administration LLC
P.O. Box 225391
New York, NY 10150-5391
 

The Settlement Administrator will review claims to determine their validity and will notify Claimants of deficiencies and provide an opportunity to cure them. If a Claimant disagrees with the decision made by the Settlement Administrator regarding their claim, they can then appeal to the Court, but there is no further right of appeal.

If you change your mailing address or email address after you submit a Claim Form, it is your responsibility to inform the Settlement Administrator of your updated information. You may notify the Settlement Administrator of any changes by calling toll-free (833) 621-8029 or by writing to:
 

Cencora Data Security Incident Settlement Administrator
c/o Kroll Settlement Administration LLC
P.O. Box 225391
New York, NY 10150-5391 

If you file a timely and Approved Claim Form, Settlement Benefits will be provided by the Settlement Administrator after the Settlement is approved by the Court and becomes final after any appeal is concluded or the time for an appeal has expired. 

The approval process may take time. Please be patient and check this Settlement Website for updates.
 

Yes, the Court has appointed Shauna Itri of Seeger Weiss, PC, Erin Green Comite of Scott+Scott Attorneys at Law, LLP, Andrew W. Ferich of Ahdoot & Wolfson, PC, Jeannine Kenney of Hausfeld LLP, and Roberta D. Liebenberg of Fine, Kaplan, and Black, R.P.C. as Class Counsel to represent you and the Settlement Class for the purposes of this Settlement. You may hire your own lawyer at your own cost and expense if you want someone other than Class Counsel to represent you in this Action.

Class Counsel will file a motion asking the Court to award attorneys’ fees up to 33 1/3% of the $40 million Settlement Fund ($13,333,333.33) and, separately, reimbursement of reasonably incurred litigation costs and expenses up to $300,000. Class Counsel will also ask the Court to approve Service Awards for the Class Representatives of up to $1,500 each for their efforts in achieving the Settlement. If awarded by the Court, the attorneys’ Fee Award and Costs and the Service Awards will be paid from the Settlement Fund. The Court may award less than these amounts. 

Class Counsel’s application for the attorneys’ Fee Award and Costs and the Service Awards will be made available on the Documents page of this Settlement Website on December 4, 2025.
 

To exclude yourself from the Settlement, you must mail a written Request for Exclusion, which includes the following: the case name “Anaya, et al. v. Cencora, Inc., et al., No. 2:24-cv-02961-CMR”; your name, address, and telephone number; any lawyer representing you; your signature; and a statement to the effect that “I hereby request to be excluded from the proposed Settlement Class in "Anaya, et al. v. Cencora, Inc., et al., No. 2:24-cv-02961-CMR.” Any person who elects to request exclusion from the Settlement Class shall not (i) be bound by any orders or Judgment entered in the Action, (ii) be entitled to relief under the Settlement Agreement, (iii) gain any rights by virtue of the Settlement Agreement, or (iv) be entitled to object to any aspect of the Settlement Agreement.

The Request for Exclusion must be mailed to the Settlement Administrator at the following address, and be postmarked by December 18, 2025:
 

Cencora Data Security Incident Settlement Administrator
c/o Kroll Settlement Administration LLC
P.O. Box 225391
New York, NY 10150-5391

You cannot opt-out (exclude yourself) electronically or by telephone or email.

 
Requests for Exclusion may only be done on an individual basis, and no person may request to be excluded from the Settlement Class through “mass” or “class” opt-outs.

 

No. If you timely opt-out, you will not be entitled to receive Settlement Benefits, but you will not be bound by the Settlement or any judgment in this Action. You can only get Settlement Benefits if you stay in the Settlement and submit a timely and valid Claim Form.

No. Unless you timely opt-out, you give up any right to individually sue Cencora or any of the other Released Parties (including Cencora’s affiliates, customers, and business partners) about the Incident. You must opt-out of this Action to start or continue with your own lawsuit against Cencora or any of the other Released Parties (including Cencora’s affiliates, customers, and business partners) concerning the Incident. If you have a pending lawsuit about the Incident, speak to your lawyer in that case immediately.

If you are a Class Member who did not opt out, you can tell the Court you object to all or any part of the Settlement, Service Awards, and/or the attorneys’ Fee Award and Costs.

Your written objection and supporting papers must clearly: 
 

1. identify the case name and number (Anaya, et al. v. Cencora, et al., No. 2:24-cv-02961-CMR);
2. state your full name, current mailing address, and telephone number;
3. contain a statement by you that you believe you are a member of the Settlement Class;
4. include proof that you are a member of the Settlement Class (e.g., a copy of the Summary Notice or a copy of the original notice of the Incident or the Class Member ID provided on your Summary Notice);
5. identify the specific factual or legal grounds for the objection;
6. identify whether the objection is an objection to the Settlement in part or in whole;
7. state whether the objection applies only to you, a subset of the Settlement Class, or the entire Settlement Class;
8. identify all counsel representing you, if any;
9. include all documents that you desire the Court to consider;
10. contain a statement regarding whether you (or counsel of your choosing) intend to appear at the Final Approval Hearing; and
11. contain your signature or the signature of your duly authorized attorney or representative.
     

All objections, together with any briefs or other materials you wish the Court to consider, must be (1) mailed to the Settlement Administrator at the following address, and be postmarked by December 18, 2025: Cencora Data Security Incident Settlement Administrator, c/o Kroll Settlement Administration LLC, P.O. Box 225391, New York, NY 10150-5391, and (2) filed with the Court either by mailing them to: Clerk of Court, United States District Court for the Eastern District of Pennsylvania, U.S. Courthouse, 601 Market Street, Philadelphia, Pennsylvania 19106, or by filing them in person at the Clerk’s Office in the Courthouse, electronically through the Court’s electronic filing system, or through an attorney. All objections must be filed or postmarked on or before December 18, 2025. Any Class Member who does not submit their objections by December 18, 2025, and in the manner set forth above shall be deemed to have waived any objections and shall be forever barred from raising such objections in this or any other action or proceeding, absent further order of the Court.
 

Objecting is simply telling the Court you do not like something about the Settlement or the requested attorneys’ Fee Award and Costs. You can object only if you stay in the Settlement Class (meaning you do not opt-out of the Settlement). Opting out of the Settlement is telling the Court you do not want to be part of the Settlement Class or the Settlement. If you opt-out, you cannot object to the Settlement or obtain any money from the Settlement. You cannot both object and request exclusion.  

The Court will hold a Final Approval Hearing on Thursday, February 5, 2026, at 10:30 a.m. ET, before the Honorable Cynthia M. Rufe of the United States District Court for the Eastern District of Pennsylvania, U.S. Courthouse, 601 Market Street, Philadelphia, Pennsylvania 19106, Courtroom 12-A.
 

The date and time of the Final Approval Hearing are subject to change without further notice to the Settlement Class. You should check this Settlement Website to confirm whether the date and time of the Final Approval Hearing has changed. 
 

At this hearing, the Court will consider whether the Settlement is fair, reasonable, and adequate, and will decide whether to approve the Settlement, Class Counsel’s application for an attorneys’ Fee Award and Costs, and the Service Awards to the Class Representatives. If there are objections that were filed by the deadline, the Court will consider them. If you file a timely objection, and you would like to speak at the Final Approval Hearing, the Court will also listen to you or your lawyer speak at the hearing, if you so request.

No. Class Counsel will answer any questions the Court may have. However, you are welcome to attend at your own expense. If you submit an objection, you may, but do not have to, come to the Final Approval Hearing to talk about it. As long as you submit your written objection on time to both the Settlement Administrator and the Court, the Court will consider it.

Yes, as long as you do not exclude yourself (opt-out) and you submit a timely written objection requesting to speak at the hearing, you can (but do not have to) participate and speak for yourself at the Final Approval Hearing. This is called making an appearance. You also can have your own lawyer speak for you, but you will have to pay for the lawyer yourself. 

If you want to appear, or if you want your own lawyer instead of Class Counsel to speak for you at the Final Approval Hearing, you must follow all the procedures for objecting to the Settlement listed in FAQ 20 and specifically include a statement whether you and your lawyer will appear at the Final Approval Hearing.
 

If you are a Class Member and you do nothing, you will not receive Settlement Benefits, and you will give up rights explained in the “Excluding Yourself from the Settlement” section of this Notice, including your right to start a lawsuit or continue with a lawsuit against Cencora and the other Released Parties (including Cencora’s affiliates, customers, and business partners) about the Incident.

This Settlement Website summarizes the proposed Settlement. For more details about the Settlement, please see the Settlement Agreement and other related documents available on the Documents page of this Settlement Website, by calling toll-free (833) 621-8029, by contacting Class Counsel, or by visiting the Clerk’s Office, United States District Court for the Eastern District of Pennsylvania, U.S. Courthouse, 601 Market Street, Philadelphia, Pennsylvania 19106, between 9:00 a.m. and 4:00 p.m., Monday through Friday, excluding Court holidays.
 

If you have questions about the proposed Settlement or anything on this Settlement Website, you may also contact the Settlement Administrator at:
 

Cencora Data Security Incident Settlement Administrator
c/o Kroll Settlement Administration LLC
P.O. Box 225391
New York, NY 10150-5391
 

PLEASE DO NOT CONTACT THE COURT OR THE JUDGE’S CHAMBERS TO INQUIRE ABOUT THIS SETTLEMENT OR THE CLAIM PROCESS.