#United States #Data Security #Conshohocken #Cencora #The Lash Group

The Lash Group, LLC Settles Data Security Incident

On September 19, 2025, Kroll Settlement Administration announced that The Lash Group, LLC has reached an agreement to settle a class action lawsuit stemming from a significant data security incident. This incident involved unauthorized access to sensitive information, potentially including personal data of numerous individuals.

Background of the Incident

The issue began when unknown parties improperly accessed information from The Lash Group's systems. Details of this breach were initially disclosed by Cencora, Inc., The Lash Group's parent company, on February 27, 2024. Following the revelation of this incident, The Lash Group took measures to inform affected individuals and assist their business partners in compliance with legal notification requirements.

Universally affecting residents of the United States and its territories, the class includes all individuals whose personal information was potentially compromised, specifically those who received direct notifications or were made aware due to suspicious activities regarding their data.

The Financial Settlement

The Class Settlement establishes a substantial $40 million fund aimed at compensating those affected. The fund is allocated for several purposes:
1. Approved Claims for documented losses or cash payments.
2. Coverage of administrative expenses, taxes, and reasonable escrow fees.
3. Court-approved service awards for the plaintiffs that initiated the litigation, with potential rewards of up to $1,500 each.
4. Attorneys' fees, capped at one-third of the total settlement fund, alongside costs up to $300,000.

To benefit from the settlement, class members can choose between two compensation options:

• - Documented Loss Payment: Up to $5,000 for individuals to recover documented expenses associated with the incident, with a total cap of $5 million on all such payments.
• - Cash Fund Payment: Based on the remaining amount in the settlement fund after other payouts are processed, this option provides an additional cash benefit, contingent on the number of approved claims.

Claim Submission Process

Individuals eligible for compensation must file a claim using the provided online portal at CencoraIncidentSettlement.com or by mailing a Claim Form postmarked by January 19, 2026.
Participants wishing to opt-out of the settlement must submit a Request for Exclusion by December 18, 2025. Those choosing to remain in the class waive any claims against The Lash Group related to this incident. Individuals also have the option to voice objections to the settlement by the same deadline.

Final Approval Hearing

A Final Approval Hearing is scheduled for February 5, 2026, at 10:30 a.m. ET in the U.S. District Court for the Eastern District of Pennsylvania. During this hearing, the court will review the settlement terms, service awards, attorneys' fees, and any objections raised by class members. It is important to note that attendance at this hearing is not mandatory for class members.

Conclusion

The settlement aims to provide justice and remediation for those affected by The Lash Group's data security lapse. Individuals are encouraged to stay informed about their rights and options regarding this incident through the designated settlement website, where further updates and information are continually posted.

For any further inquiries, affected individuals can contact Kroll Settlement Administration or visit the provided settlement website for information and to ensure their claims are submitted timely.