PANews reported on September 18 that hackers who launched a cyberattack against drug distributor Cencora Inc. received a total of $75 million, according to Bloomberg, citing people familiar with the matter. The money from the Cencora hacker attack was paid in Bitcoin in three installments in March. This is the largest known cyber extortion money to date. According to two people familiar with the matter, the initial ransom demand was $150 million. According to regulatory documents, Cencora learned in February that its system data had been stolen. Two months after disclosing the incident, Cencora began notifying individuals and state governments that their personal data (including name, address, date of birth, diagnosis, prescriptions and medications) had been stolen. The company's July quarterly report stated that most of the $31.4 million in "other" expenses in the nine months ending June 30 were incurred due to cybersecurity incidents in which data was leaked. It is not clear how these funds are related to the cyberattack.
Cencora, formerly AmerisourceBergen, is a Conshohocken, Pennsylvania-based company with a market capitalization of about $46 billion and revenue of $262 billion in its last fiscal year.
