Skip to content
ChickenStockChickenStock
ResearchFilings

AI English summary of an SEC filing — figures as filed

Cencora logoCencora COR

The company said that in the original report it had learned that data from its information systems had been exfiltrated. It said that through the investigation in this amended report, it learned that more data than initially identified had been exfiltrated. The company learned of the exfiltration on February 21, 2024.

8-K/AMaterial Cybersecurity Incidents (amended)Amended filingFiled Period of report Summary published (UTC)

Key points

AI summary
  1. The company said that in the original report it had learned that data from its information systems had been exfiltrated. It said that through the investigation in this amended report, it learned that more data than initially identified had been exfiltrated. The company learned of the exfiltration on February 21, 2024.

  2. Cencora said it has completed its review of most of the exfiltrated data. It said the data included personally identifiable information (PII) and protected health information (PHI), most of which is held by a subsidiary that provides patient support services.

  3. The company said it has provided required notifications to potentially affected parties and individuals, as well as regulatory agencies, for the PII and PHI identified to date. It said it continues to review the data and intends to provide any additional required notifications. The company also said it has no evidence that any of the data has been or will be publicly disclosed.

  4. The company said it believes it has contained the incident and is working with cybersecurity experts on improvements, including reinforcing its systems. It also said it does not believe the incident is reasonably likely to materially impact its financial condition or results of operations, and that the incident has not had a material impact on its operations.

Summary

AI-written

Analysis scope · Filing bodyWe analyzed the filing body and confirmed exhibits. This is not a review of other exhibits, investor presentations or the full earnings call.

Cencora Discloses Learning of February 21, 2024 Data Exfiltration and Additional Data Identified

The company said that in the original report it had learned that data from its information systems had been exfiltrated. It said that through the investigation in this amended report, it learned that more data than initially identified had been exfiltrated. The company learned of the exfiltration on February 21, 2024.

Source · Based on the filing body and exhibits

Exfiltrated Data Included PII and PHI, Mostly Held by Patient Support Subsidiary

Cencora said it has completed its review of most of the exfiltrated data. It said the data included personally identifiable information (PII) and protected health information (PHI), most of which is held by a subsidiary that provides patient support services.

Source · Based on the filing body and exhibits

Notifications Made to Affected Parties and Regulators; No Evidence of Public Disclosure

The company said it has provided required notifications to potentially affected parties and individuals, as well as regulatory agencies, for the PII and PHI identified to date. It said it continues to review the data and intends to provide any additional required notifications. The company also said it has no evidence that any of the data has been or will be publicly disclosed.

Source · Based on the filing body and exhibits

Incident contained, improvements underway, no material impact

The company said it believes it has contained the incident and is working with cybersecurity experts on improvements, including reinforcing its systems. It also said it does not believe the incident is reasonably likely to materially impact its financial condition or results of operations, and that the incident has not had a material impact on its operations.

Source · Based on the filing body and exhibits

AI summarized the filing and translated the summary into English; it may differ from the original. For reference only, not investment advice. AI translated the published Korean report into English. Figures are copied as filed, not recalculated.

Original filing

The filing as submitted to SEC EDGAR. You can check the figures and statements of this summary against it.

Source: SEC EDGAR (U.S. Securities and Exchange Commission). Item captions are the SEC's. The summary is for reference only and is not investment advice.