Kroll Settlement Administration Announces that The Lash Group, LLC Has Reached a Settlement Regarding a Data Security Incident

CONSHOHOCKEN, Pa.--(BUSINESS WIRE)--The following statement is being issued by Kroll Settlement Administration regarding the Cencora Data Security Incident Settlement.

A proposed Class Settlement arising out of a Data Security Incident has been reached with The Lash Group, LLC (“The Lash Group”). In the Data Security Incident, data from The Lash Group’s information systems was improperly accessed by unknown parties, some of which could contain Personal Information. The Lash Group’s parent company, Cencora, Inc., disclosed the Incident on February 27, 2024. Following an investigation, The Lash Group assisted its business partners and affiliates in providing notice of the Data Security Incident to individuals as required by law or as otherwise appropriate.

The Settlement Class includes all individuals and other persons who reside in the United States and its territories whose Personal Information was involved in the Data Security Incident, to whom The Lash Group provided either mailed notice or substitute notice through website and/or media press release (“Incident Notice”) or who were on “Inquiry Notice” because of circumstances occurring on or after September 1, 2023 suggesting that an individual is aware of harm potentially arising from the unauthorized use of the individual’s Personal Information, such as receipt of an unexpected explanation of benefits statement or a fraud alert from a bank, that upon inquiry, would have caused the individual to determine that the harm may have been caused by the Data Security Incident.

The Settlement establishes a $40 million Settlement Fund to pay (1) Approved Claims for Documented Loss or Cash Fund Payments; (2) Administrative Expenses, Taxes, and reasonable escrow fees; and (3) Court-approved Class Representative Service Awards to the named Plaintiffs who brought the litigation (up to $1,500 each), attorneys’ Fee Award (up to 33 1/3% of the Settlement Fund), and Costs (up to $300,000). The Lash Group also has undertaken security commitments to strengthen its information security. Claimants may select ONE of the following cash Settlement Benefits:

• Documented Loss Payment – reimbursement for certain Documented Losses, i.e., money spent or fees incurred that are more likely than not related to the Incident, up to $5,000 per claimant, subject to an aggregate cap of $5,000,000 for all Documented Loss Payments; OR
• Cash Fund Payment – a cash payment, in an amount to be determined consistent with the Settlement. The amount of any Cash Fund Payment depends on the number of Approved Claims and how much of the Settlement Fund remains after payment of Approved Claims for Documented Loss Payments, Administrative Expenses, Taxes, escrow fees, Service Awards, and attorneys’ Fee Award and Costs.

To get settlement benefits, Class Members must complete and submit a Claim Form online at www.CencoraIncidentSettlement.com or by mail postmarked no later than January 19, 2026.

Class Members who do not want to be legally bound by the Settlement may submit a Request for Exclusion by December 18, 2025. Class Members who do not exclude themselves will release any claims they may have against The Lash Group or the Released Parties (as defined in the Settlement Agreement) related to the Data Security Incident, as more fully described on the Settlement Website. Class Members who do not exclude themselves may object to the Settlement by December 18, 2025. Instructions for excluding oneself or objecting are available on the Settlement Website.

The Court will hold a Final Approval Hearing on Thursday, February 5, 2026, at 10:30 a.m. ET, before the Honorable Cynthia M. Rufe of the United States District Court for the Eastern District of Pennsylvania, U.S. Courthouse, 601 Market Street, Philadelphia, PA 19106, Courtroom 12-A, to consider: whether to approve the Settlement, Service Awards, attorneys’ Fees and Costs, as well as any objections. Class Members or their attorneys may request to appear at the hearing but are not required to do so.

Potential Class Members can visit the Settlement Website at www.CencoraIncidentSettlement.com for information and updates concerning the Settlement and to submit claims.