Money, explained for the rest of us.

Get our free daily email →

Cencora and Lash Group’s $40 million data-breach settlement now expects to start paying claimants in November, after earlier payment targets slipped

By

Image Credit: Donald Teel/Unsplash

People who filed a claim in the Cencora data-breach settlement are still waiting on money, and the wait just got a new end date. The settlement administrator, Kroll Settlement Administration, says it anticipates beginning to send payments to eligible claimants in November 2026. The notice went up on the official settlement website on October 16.

It is the latest in a string of dates that came and went. Three earlier targets, August, September and October 2026, all passed without a payment going out.

What did the administrator say about the new timing?

The settlement website states that the administrator “anticipates being able to begin distribution of settlement proceeds to eligible claimants in November 2026.” The page ties the timing to the large volume of claims submitted. It describes November as an expectation, not a promised payment date.

The delay matters most to people who filed by the January 19, 2026 claims deadline and have heard nothing since. Those claimants are waiting on the administrator now, and they need to watch for the check or electronic payment, and to know which payment option they picked, because the two options pay very differently.

Retirement deadlines, in your inbox: Miss an enrollment or claim deadline and the money can be gone. Join the Retirement Money Brief and we’ll send you our Open Settlements & Refund Tracker as a welcome gift.

Get the Brief + the settlements tracker →

We may earn a commission from links on this page.

How many payment dates have already slipped?

According to Open Class Actions, which tracks settlement filings, the earlier targets were August, September and October 2026. Each was missed because of the large volume of claims. November is now the fourth month the administrator has pointed to.

The case is Anaya, et al. v. Cencora, Inc., et al., filed in federal court in the Eastern District of Pennsylvania. The settlement website says the agreement has received final approval from the court. A final approval hearing had been scheduled for February 5, 2026, before Judge Cynthia M. Rufe in Philadelphia.

What is in the $40 million fund?

The fund totals $40,000,000, and the website says Cencora has also added data and information security measures since the incident. Claimants chose one of two payments. A documented-loss payment reimburses up to $5,000 per person for losses and unreimbursed expenses incurred from September 1, 2023 through the claims deadline, with proof. All documented-loss payments together are capped at $5,000,000.

The other choice was a cash fund payment, which needs no documentation. That amount is not fixed. The website says it depends on how many cash claims are approved and on what remains after deductions for approved documented losses, attorneys’ fees and costs, service awards, escrow fees, taxes and administrative expenses.

The HIPAA Journal reports that attorneys’ fees of up to $13,333,333.33 are part of that arithmetic. In practical terms, the size of the cash payment will not be known until the administrator finishes counting claims.

Who was caught in the Cencora breach?

Cencora learned on February 21, 2024 that data had been taken from its systems. The HIPAA Journal reports that at least 1.43 million people had been notified. Lash Group is named with Cencora in the settlement.

Anyone who missed the January 19, 2026 deadline cannot file now. People who did file can follow the administrator’s updates on the settlement site, and the administrator says it does not communicate by text message.

What should claimants watch for between now and November?

The administrator has not published a payment date inside November, a payment method breakdown or the cash payment amount. Until it does, the settlement website is the only place with the administrator’s current word. It lists a toll-free line at (833) 621-8029 for questions, and a mailing address at Kroll Settlement Administration, P.O. Box 225391, New York, NY 10150-5391.

With the date already moved several times, the open question is whether November holds. Claimants who kept their confirmation and the payment option they chose will be in the best position to spot a missing or wrong payment when it arrives.

Watching for your Cencora payment?

A payment date that has moved from August to November is easy to lose track of, and a settlement check that sits unnoticed can expire. Many people file a claim, set the confirmation aside and then cannot say which option they chose or when the money was due.

The Settlement & Refund Recovery System includes a claim log and payment tracker, so the filing date, the option chosen and the expected payment month sit on one page. It also includes the four-date rule for reading a settlement notice and instructions for getting an expired or uncashed settlement check reissued.

Get the claim log and payment tracker for the Cencora settlement →


More Financial Reading

This article was produced with AI assistance and edited for accuracy against the sources linked above.


Spotted an error? Tell us at [email protected]. We fix mistakes fast and in the open — see how we work on our standards page.

Get the money news that affects your wallet — free, every weekday morning.