As the week draws to a close, clients of Cencora and The Lash Group have been submitting breach notifications to state attorneys general.

The Lash Group partners with pharmaceutical companies, pharmacies, and healthcare providers to facilitate access to therapies through drug distribution, patient support and services, business analytics and technology, and other services. Their substitute notice explains that based on their investigation, personal information including personal health information was affected, “including potentially first name, last name, date of birth, health diagnosis, and/or medications and prescriptions.”

With only partial numbers from some clients available, there are already 542,062 patients affected. When full numbers are revealed, the grand total for this incident will likely be significantly higher. (See UPDATE below)

Update 1: Added Johnson & Johnson entries and Abbott entry, bringing current partial total affected to 717,723 for 18 clients.

Update 2: Added Amgen, but no numbers available, so partial total remains at 717,723 but for 19 incidents.