According to Foresight News, Bloomberg reported, citing people familiar with the matter, that hackers who carried out a cyberattack on drug distributor Cencora received a $75 million ransom payment in three installments in the form of Bitcoin in March of this year, which is the largest known cyber ransom payment to date. The company showed the costs of cybersecurity incidents in its July quarterly report, saying that most of the $31.4 million in "other" expenses were due to cybersecurity incidents involving data leaks. It is not clear what the money covers related to the cyberattack. Two months after the incident was disclosed, Cencora began notifying individuals and national authorities that personal data including name, address, date of birth, diagnosis, prescriptions and medications had been stolen.
Earlier in July, cybersecurity firm Zscaler and blockchain analysis firm Chainaanalysis said the hacker group Dark Angels received a huge ransom but did not disclose the identity of the victim. The highest known cyber ransom amount before the Cencora incident was $40 million, paid by insurance company CNA Financial Corp. in 2021.
